Technology Risk and Compliance Analyst

Mizuho Global Services Pvt Ltd (MGS) is a subsidiary company of Mizuho Bank, Ltd, which is one of the largest banks or so called Mega Banks of Japan. MGS was established in the year 2020 as part of Mizuhos long-term strategy of creating a captive global processing center for remotely handling banking and IT related operations of Mizuho Banks domestic and overseas offices and Mizuhos group companies across the globe. At Mizuho we are committed to a culture that is driven by ethical values and supports diversity in all its forms for its talent pool. Direction of MGSs development is paved by its three key pillars, which are Mutual Respect, Discipline and Transparency, which are set as the baseline of every process and operation carried out at MGS. Whats in it for you Immense exposure and learningExcellent career growthCompany of highly passionate leaders and mentorsAbility to build things from scratch Know more about MGS:https://www.Mizuhogroup.Com/asia-pacific/mizuho-global-services Job Role: Senior Internal Auditor IT Audit Role Summary The Senior Internal Auditor IT Audit is a key role within the MGS Internal Audit function, responsible for providing independent assurance over the organization's technology risk landscape. This individual will lead and execute complex IT audits covering IT governance, infrastructure, cybersecurity, data security, applications, third party vendor management and IT service delivery within MGS. The role requires deep technical expertise and the ability to translate complex technical risks into business impact. The Senior IT Auditor will manage audit projects, engage with senior IT and business leadership, and be a key contributor to the Audit department's strategic objectives. The role also contributes to continuous audit monitoring, risk assessment, and audit planning and strengthens the organizations technology risk and control framework.IT Audit & Assurance : Minimum 10 years of dedicated experience in IT internal audit, risk management, or information security assurance, with at least 2 years of leading IT Audit engagements.BFSI, GCCs, Shared Services : Demonstrable experience auditing the technology environment of a Global Capability Center (GCC) or shared services environment of large banking or financial services entities, including infrastructure, service delivery, applications and data security.Technical Audit Domains: Extensive hands-on experience leading audits of IT General Controls (ITGCs), cybersecurity, cloud environments (IaaS, PaaS, SaaS), network security, application controls, third party risks (TPRM) and IT service management (ITSM).Third-party Risk Assurance: Experience auditing the full lifecycle of third-party risk management (TPRM), including vendor due diligence, contract reviews (SLAs, right-to-audit), ongoing monitoring, and offboarding, with a focus on Cloud Service Providers (CSPs).Technology Resilience & Business Continuity: Proven experience auditing technical disaster recovery (DR) and business continuity (BCP) programs. Expertise in validating RTO/RPO capabilities, DR testing, and BIA alignment.Project & Team Leadership: Proven ability to lead complex IT audit engagements from planning to reporting, including managing and reviewing the work of other auditorsIntegrated Audits with Data-focus: Experience working with Business auditors for end-to-end process and control assurance and partnering with data teams to define audit use cases, perform analytics-based testing. Mandatory Qualifications: Bachelors or Masters degree in Information Technology, Computer Science, or a related field Preferred: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control) Certifications : CISA (Certified Information Systems Auditor) OR Cloud-specific certifications (e.G., AWS Certified Security - Specialty, Microsoft Azure Security Engineer), CGEIT (Certified in the Governance of Enterprise IT) Knowledge of Governance Standards -- - COBIT Framework: Deep understanding and practical application of the COBIT (Control Objectives for Information and Related Technologies) framework for IT governance and management. Security & Risk Frameworks: Expertise in applying industry-standard frameworks such as the NIST Cybersecurity Framework (CSF), ISO 27001/27002, Digital and Operational Resiliency Act (DORA) and ITIL for service managementData Privacy & Regulations: Strong knowledge of data protection regulations and standards relevant to the GCC and the financial services industry (e.G., GDPR, local data privacy laws)Banking & GCC governance: Strong understanding of governance frameworks in global banking organizations and governance, risk, and compliance considerations unique to GCCs .