Internal Controls Specialist (m/f/d)

Job Description

Additional Key Requirements

• Strong experience in ISO 27001 compliance, implementation, and audits.

• Expertise in end-to-end IT Audit, including planning, execution, control testing, remediation tracking, and audit reporting.

• Experience in Information Security implementation, governance, risk management, and compliance frameworks.

• Good understanding of Data Privacy regulations and security controls, ensuring compliance with organizational and regulatory requirements.

• Ability to assess, design, and implement security controls to mitigate operational, financial, and compliance risks.

• Experience in conducting security risk assessments, control reviews, and compliance monitoring activities.

Updated Role Summary Takes overall responsibility for the Internal Control System (ICS) within the Shared Service Center (SSC), DTSE India. Reports directly to the Internal Controls Manager, DTSE Group, Senior Management DTSE India, and Manager Finance, T-Systems ICT India Private Limited. Advises business stakeholders on implementing and documenting key controls in accordance with the DTSE ICS Masterplan. Conducts risk analyses for ICS-relevant processes and systems, with a focus on financial reporting and accounting risks. Defines and evaluates key controls from an ICS, audit, and compliance perspective. Coordinates ICS audits with local and international auditors, as well as the Internal Audit function. Drives implementation and maintenance of ISO 27001 controls, IT security standards, and audit requirements. Leads end-to-end IT audit activities, including remediation follow-up and closure of audit observations. Ensures adherence to data privacy, information security, and regulatory compliance requirements. Monitors changes in ICS methodology, compliance requirements, and security regulations, cascading updates to process and control owners. Provides recommendations for standardization, automation, and optimization of controls to improve efficiency and effectiveness. Collaborates with business, IT, risk, compliance, and audit teams to strengthen the overall governance and control environment.

Additional Skills

• ISO 27001 Lead Implementer / Lead Auditor experience preferred.

• ITGC (IT General Controls) and SOX/Internal Controls experience.

• Risk Management, Compliance, Governance, and Audit Management.

• Data Privacy and Information Security Governance.

• Strong stakeholder management and communication skills.

• Experience with control automation and continuous monitoring frameworks.

Qualifications

Additional Information Please Note: Fraudulent job postings/job scams are increasingly common. Beware of misleading advertisements and fraudulent communication issuing 'offer letters' on behalf of T-Systems in exchange for a fee. Please look for an authentic T-Systems email id - XYZ@t-systems.com. Stay vigilant. Protect yourself from recruitment fraud! To know more please visit : Fraud Alert

Your Task

This role takes overall responsibility for the Internal Control System (ICS) within the Shared Service Center (SSC), DTSE India. The position reports directly to the Internal Controls Manager, DTSE Group, Senior Management DTSE India, and Manager Finance, T-Systems ICT India Private Limited. This role requires strong experience in ISO 27001 compliance, implementation, and audits, as well as expertise in end-to-end IT Audit.

Responsibilities

• Advise business stakeholders on implementing and documenting key controls in accordance with the DTSE ICS Masterplan

• Conduct risk analyses for ICS-relevant processes and systems, with a focus on financial reporting and accounting risks

• Define and evaluate key controls from an ICS, audit, and compliance perspective

• Coordinate ICS audits with local and international auditors, as well as the Internal Audit function

• Drive implementation and maintenance of ISO 27001 controls, IT security standards, and audit requirements

• Lead end-to-end IT audit activities, including planning, execution, control testing, remediation tracking, and audit reporting

• Ensure adherence to data privacy, information security, and regulatory compliance requirements

• Monitor changes in ICS methodology, compliance requirements, and security regulations, cascading updates to process and control owners

• Provide recommendations for standardization, automation, and optimization of controls to improve efficiency and effectiveness

• Collaborate with business, IT, risk, compliance, and audit teams to strengthen the overall governance and control environment

• Assess, design, and implement security controls to mitigate operational, financial, and compliance risks

• Conduct security risk assessments, control reviews, and compliance monitoring activities

• Implement Information Security governance, risk management, and compliance frameworks

• Ensure compliance with Data Privacy regulations and security controls in accordance with organizational and regulatory requirements

Your Profile

We are looking for an experienced Internal Controls and IT Audit professional with strong expertise in ISO 27001 compliance, IT audit, information security implementation, and data privacy regulations. The ideal candidate will have comprehensive knowledge of governance, risk management, and compliance frameworks with excellent stakeholder management skills.

Must Have Skills

• Strong experience in ISO 27001 compliance, implementation, and audits

• Expertise in end-to-end IT Audit, including planning, execution, control testing, remediation tracking, and audit reporting

• Experience in Information Security implementation

• Experience in governance, risk management, and compliance frameworks

• Good understanding of Data Privacy regulations and security controls

• Ability to ensure compliance with organizational and and regulatory requirements

• Ability to assess, design, and implement security controls to mitigate operational, financial, and compliance risks

• Experience in conducting security risk assessments

• Experience in control reviews and compliance monitoring activities

• ITGC (IT General Controls) and SOX/Internal Controls experience

• Risk Management, Compliance, Governance, and Audit Management experience

• Data Privacy and Information Security Governance experience

• Strong stakeholder management skills

• Strong communication skills

Nice to Have Skills

• ISO 27001 Lead Implementer / Lead Auditor experience

• Experience with control automation and continuous monitoring frameworks