# IT Application Security Auditor

**Company**: S&P Global
**Location**: Hyderabad, Telangana
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Finance

**Apply**: https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/Hyderabad-Telangana/IT-Lead--Internal-Audit_331586-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_78450d2a-e1e

## Description

You will be part of a global and diverse Audit team with coverage for enterprise-wide Applications at S&P Global, a leader in credit ratings, benchmarks and analytics. As an IT Application Security Auditor, you will focus on audit plan management and execution of Technology audits globally, providing a company-wide perspective of the state of the internal technology environment.

**Responsibilities:**

- Lead application security audits, ensuring efficient and timely execution of the approved Audit Plan.

- Conduct comprehensive security audits, including penetration testing, to identify vulnerabilities across applications, infrastructure, databases, operating systems, and cloud environments.

- Execute end-to-end audits in alignment with the annual audit plan, ensuring timely completion.

- Review audit outcomes and results, collaborating with key auditees to agree on remedial action plans and facilitate smooth audit processes.

- Leverage data analytics and automation to enhance the efficiency and quality of audit execution.

- Collaborate with key stakeholders within the divisional technology functions to enhance audit effectiveness.

- Stay informed about best practices in information security audits to ensure continuous improvement.

- Keep abreast of emerging security threats, trends, and technologies to enhance security posture and refine internal audit processes.

**Requirements:**

- 5+ years of experience handling several technology audits including web applications.

- Experience with a Big 4 firm would be an advantage.

- Experience in conducting penetration testing using tools such as Burp suite, Metasploit, NMAP, Nessus, etc.

- Exposure to Python programming and awareness of generative AI technologies.

- Knowledge of risk management frameworks and proficient in carrying out in-depth Applications security including configurations.

- Strong knowledge of cloud security and best practices for cloud penetration testing.

- Familiarity with data analytics tools such as Alteryx, Power BI, and Tableau is an advantage.

- Excellent report writing skills.

- Strong written and oral communication, approachable style, and well-developed negotiation and listening skills.

- Demonstrated experience in strong work ethic, initiative, teamwork, and flexibility in meeting department goals.

- Excellent team collaboration skills to deliver results, innovate and strive for excellence.

**Benefits:**

- Health & Wellness: Health care coverage designed for the mind and body.

- Flexible Downtime: Generous time off helps keep you energized for your time on.

- Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.

- Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.

- Family Friendly Perks: It's not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families.

- Beyond the Basics: From retail discounts to referral incentive awards,small perks can make a big difference.

## Skills

### Required
- Python
- Burp suite
- Metasploit
- NMAP
- Nessus
- data analytics
- cloud security
- risk management frameworks
- Applications security

### Nice to have
- Alteryx
- Power BI
- Tableau
- CISA
- CISSP
- CEH
- Red Team

---

Source: [Apply at spgi.wd5.myworkdayjobs.com](https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/Hyderabad-Telangana/IT-Lead--Internal-Audit_331586-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)