INTERNAL AUDIT TEAM - AUDIT ASSOCIATE
Job Summary:
The Audit Associate is responsible for understanding security requirements to meet industry best practices with a
focus on certification and regulatory requirements. As part of this role, the Audit associate is responsible for
mapping these requirements to security controls and actionable practices across various functions within the
company. In some instances this individual will be responsible for designing security controls that best fit our
environment while maintaining security compliance. Finally, applying automation to as many controls as practicable
to ensure on-going compliance (e.g., evidence collection) and managing compliance programs from a centralized
governance management system.
Duties and Responsibilities:
● Support our ISO Audits, and conduct internal audits and operational audits.
● Review the business processes, develop and update Risk and Control Matrices (RCM), flowcharts, and
testing procedures.
● Prepare and maintain testing workpapers as well as ensure timely completion of testing
● Participate in assessing and analysing the impact of control deficiencies and audit findings; gain
stakeholder agreement on root causes of issues and appropriate corrective actions, while maintaining
positive business relationships.
● Perform all phases of applicable audits including planning, execution, close meetings, and reporting.
● Assist the Audit Lead and Chief Audit executive and other Stakeholders to identify areas of improvement
as well as recommend industry-wide best practices.
Desired Skills:
● Bachelor’s degree preferred or equivalent combination
● 2 years of relevant work experience in ISO and/or Internal Audits.
● Big 4 or similar auditing experience is desirable.
Security Roles and Responsibilities
● Experience in supporting the execution of ISO program, control principles (e.g. COSO) and
other internal audits.
● Understanding of Information Security and Governance Risk and Compliance (GRC) terms,
terminology and practices.
● Strong communication skills for communicating at various levels in the organization.
● Familiarity with common technical security controls and control frameworks such as ISO 27001/2/17/18,
SOC2, GDPR, NIST CSF, NIST 800-53, among others.
● Industry recognized certifications are a plus, e.g., COMPTIA +, etc.
● Team-oriented and will promote execution and change through influence and partnership.
● Experience clearly articulating information security risk into business terms and presenting to company
management.
● Detail and team orientated; ability to work both independently and as a team member.
Skills Required
- Bachelor's degree or equivalent combination of education and experience
- Two years of relevant experience in ISO and/or internal audits
- Experience supporting ISO programs, control principles such as COSO, and internal audits
- Understanding of information security and Governance Risk and Compliance terminology and practices
- Familiarity with ISO 27001/2/17/18, SOC 2, GDPR, NIST CSF, and NIST 800-53
- Industry-recognized certification such as CompTIA+
- Strong communication skills and ability to articulate information security risk in business terms
- Big Four or similar auditing experience
What We Do
Yubi is the world's first possibility platform powering the discovery, investment, fulfilment of credit. We are re-defining global debt markets by freeing the flow of finance between borrowers, lenders, and investors. Yubi stands for ubiquitous, being present wherever our customers need us. From being a disruptor in India’s debt market to marching towards global corporate markets, we will unlock greatness together. We are on a mission to deepen and power the $120 Trillion global enterprise debt market which would unlock a GDP multiplier and thus, create massive economic value. The Yubi product suite is leading the empowerment of small, medium, and large enterprises on one side, and growing a healthy loan book for the larger Banking ecosystem on the other. As a debt platform for enterprises, lenders and investors, we offer the most comprehensive bouquet of debt products. Our suite of product offerings ensures that as a participant in the debt market - you find just what you are looking for! We believe that access to prudent finance is the right of all global citizens and that is what drives all of us here at Yubi. The future of finance starts here, propelled by technology, transparency, and mutual trust.
