
Assistant Manager - Financial Reporting Controls & ITGC
- Pune, Maharashtra
- Permanent
- Full-time
Salary range: Rs 1000000 - Rs 1200000 (ie INR 10-12 LPA)
Min Experience: 2 years
Location: Pune, Magarpatta
JobType: full-timeRequirementsLead the annual review of critical assets involved in financial reporting, ensuring alignment with protection standards and regulatory expectations. Collaborate with external auditors, platform/risk leads, and system SMEs to assess and strengthen information security controls.Assets in Scope:
- Applications: SaaS platforms, in-house applications/tools, services, EUC solutions, ETL tools, etc.
- Databases: IBM DB2 AS400 (mainframe), Oracle, SAP, SQL, and other relational databases.
- Servers: Windows Server, Linux, Unix, and associated operating systems.
- Evaluate password enforcement mechanisms across assets.
- Review domain and application-level policies, password storage methods, and encryption algorithms.
- Assess use of vaults and PAM solutions.
- Identify privileged accounts and review their usage and access controls.
- Review provisioning and deprovisioning processes.
- Evaluate periodic access reviews and recertification procedures.
- Analyze the development-to-deployment lifecycle.
- Validate user role separation and technical constraints across environments.
- Review change logging, testing, and approval processes.
- Identify and assess configuration changes via system or deployment tools.
- Evaluate incident management processes, including error reporting and ticket tracking.
- Support external auditors with asset sampling, walkthroughs, and evidence gathering.
- Document and report control assessments and manage audit findings in line with standards.
- Communicate assessment outcomes to SMEs, helping them understand risks and control gaps.
- Contribute to team knowledge sharing, testing activities, and training initiatives.
- Financial Reporting Control Framework (FRCF) Testing
- Strong knowledge of ITGC framework
- High-level technical knowledge of risk management and audit techniques
- Understanding of IT Governance Frameworks & regulatory requirements
- Strong relationship-building and communication skills
- Ability to influence, negotiate, and manage conflict at a senior level
- Strong IT and report writing skills
- Corporate governance and compliance understanding
- Self-motivated and driven to achieve excellence
- Operating model designed to deliver value-added services to stakeholders
- Dynamic team of 50+ professionals
- Works closely with business units, transformation, and risk teams
- Coordinates with senior stakeholders and supplier partners