https://dream.weekday.works/redirectToHiringCopilotExtension/

IT risk assurance and advisory manager, Digital Accelerator:
> Information privacy / data protection
> Information security / cybersecurity
> IT architecture
> IT/IS risk management
> Development of IT/IS policies and procedures
> IT/IS regulatory compliance
> IT benchmarking

PwC Acceleration Centers (ACs), formerly Service Delivery Centers, are diverse, global talent hubs focused on delivering value to our clients – working with global client engagement teams across the PwC network. Driving new digital ways of working, ACs help unlock new opportunities for our people, organization and clients through competency enhancement, collaboration, automation, quality, innovation and integrated global delivery.

Our Acceleration Centers span 11 cities and seven countries, and provide virtual client engagement support around the world and across all of PwC’s services and capabilities.

Professionals in our innovative Acceleration Centers (ACs) are part of inclusive teams who work together across functions and geographies; engage in challenging projects; and provide distinctive services to support client engagements through enhanced quality and innovation. A role in our Acceleration Centers will provide growth potential and valuable learning opportunities.

A community of solvers combining human ingenuity, experience, technology and products to help organizations build trust and deliver sustained outcomes.

Astana Financial Services Authority (the financial regulator of the AIFC), Department of Financial Technologies (FinTech Lab)

> Development of the Technological Sandbox infrastructure for the participants;
> Development of the Payments Infrastructure within AIFC;
> Development of regulations and policies on FinTech (authorization, monitoring concepts);
> Participation in project management and testing of the CRM system;
> Assessment of FinTech companies to authorize them for the Regulatory Sandbox (review and risk-assessment of IT and IS domains).

Risk Advisory, Cybersecurity, Operational Risk

> External/Internal IT and IS audit (PCAOB / SEC, COBIT, ITIL, ISO 27k)
> Review of the work performed by junior colleagues, reporting
> Testing of IT General Controls, Business Cycle Controls, IPE, process flows (incl. SAP)
> Compliance audits based on statutory regulations
> Assessment of the internal control environment according to SOX 404
> Assessment of remedial actions performed by entity as a follow-up actions for risen findings
> Process review, risk register development, DPIA and risk assessment with regards to protection of personal data according to EU GDPR (General Data Protection Regulation)
> Implementation and configuration of the SAP GRC solution (Access Control)
> Project management
> Sales activities

Deloitte drives progress. Our firms around the world help clients become leaders wherever they choose to compete. Deloitte invests in outstanding people of diverse talents and backgrounds and empowers them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities. DTTL (also referred to as “Deloitte Global”) and each of its member firms are legally separate and independent entities. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more.The content on this page contains general information only, and none of Deloitte Touche Tohmatsu Limited, its member firms, or their related entities (collectively the “Deloitte Network”) is, by means of this publication, rendering professional advice or services. Before making any decision or taking any action that may affect your finances or your business, you should consult a qualified professional adviser. No entity in the Deloitte Network shall be responsible for any loss whatsoever sustained by any person who relies on content from this page.

Scopri i servizi forniti da Deloitte Italy.

Risk Advisory, Cybersecurity, Operational Risk

> Implementation of SAP GRC AC solution;
> Internal controls transformation and optimization;
> Development of internal policies and procedures;
> Implementation of SOD-matrix in finance business process;
> Risk Management, Project Management;
> Penetration testing (infrastructure).

Risk Advisory / IT Audit / IT Consulting

> External IT audit of processes based on CobIT 5
> Assessment of the internal control environment according to SOX 404
> Assessment of remedial actions performed by entity as a follow-up actions for risen findings
> Calculation of processes' maturity and capability
> Creation of responsibility assignment matrix (RACI)
> IT Audit report

Project:
Shared Services Center concept development for large oil and gas company.

Responsibilities:
> analysis of the current situation of the Company's IT-infrastructure;
> identification of weaknesses and development areas for the Company's IT-infrastructure;
> development of recommendations and requirements for SSC's IT-infrastructure

Enterprise Risk Services, IT Audit/IT Consulting

> Assisting internal/external audit team for assurance of application and general computer controls as a part of internal/external audit
> Performing information systems audit as a part of due-diligence process
> Operational Audit on effectiveness of the investments allocation
> Risks identification, Controls and Countermeasures creation, defining test approach
> Preparing audit reports with detailed recommendations based upon audit findings and client response
> Delivering risk-mitigation reports to the Senior Management and monitoring implementation of proposed recommendations
> Communicating audit findings at update meetings and closing conferences with appropriate management personnel, led negotiation meetings of audit results
> Utilizing technologies to improve effectiveness and efficiency of audit process
> Working with large sets of data to perform substantive testing using ACL
> Analysing journal entries with ACL to identify transactions with fraudulent attributes and used the output of this analysis for further investigation
> Preparation of final deliveries – reports and presentations
> Counselling of junior colleagues
> Facilitation of internal/external trainings on IT audit

> Practiced in routers and switches configurations
> Installed servers
> Used virtual technologies
> Investigated on network troubleshooting
> Performed research on usage digital signatures in network technologies

> Digital Signature Infrastructure study(general understanding and process overview)