You will be part of a global and diverse Audit team with coverage for enterprise-wide Applications at S&P Global, a leader in credit ratings, benchmarks and analytics. As an IT Application Security Auditor, you will focus on audit plan management and execution of Technology audits globally, providing a company-wide perspective of the state of the internal technology environment.
Responsibilities:
Lead application security audits, ensuring efficient and timely execution of the approved Audit Plan.
Conduct comprehensive security audits, including penetration testing, to identify vulnerabilities across applications, infrastructure, databases, operating systems, and cloud environments.
Execute end-to-end audits in alignment with the annual audit plan, ensuring timely completion.
Review audit outcomes and results, collaborating with key auditees to agree on remedial action plans and facilitate smooth audit processes.
Leverage data analytics and automation to enhance the efficiency and quality of audit execution.
Collaborate with key stakeholders within the divisional technology functions to enhance audit effectiveness.
Stay informed about best practices in information security audits to ensure continuous improvement.
Keep abreast of emerging security threats, trends, and technologies to enhance security posture and refine internal audit processes.
Requirements:
5+ years of experience handling several technology audits including web applications.
Experience with a Big 4 firm would be an advantage.
Experience in conducting penetration testing using tools such as Burp suite, Metasploit, NMAP, Nessus, etc.
Exposure to Python programming and awareness of generative AI technologies.
Knowledge of risk management frameworks and proficient in carrying out in-depth Applications security including configurations.
Strong knowledge of cloud security and best practices for cloud penetration testing.
Familiarity with data analytics tools such as Alteryx, Power BI, and Tableau is an advantage.
Excellent report writing skills.
Strong written and oral communication, approachable style, and well-developed negotiation and listening skills.
Demonstrated experience in strong work ethic, initiative, teamwork, and flexibility in meeting department goals.
Excellent team collaboration skills to deliver results, innovate and strive for excellence.
Benefits:
Health & Wellness: Health care coverage designed for the mind and body.
Flexible Downtime: Generous time off helps keep you energized for your time on.
Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.
Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.
Family Friendly Perks: It's not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families.
Beyond the Basics: From retail discounts to referral incentive awards,small perks can make a big difference.
This page helps Indian job seekers prepare for Python interviews for backend, data engineering and data analyst roles, whether you are a fresher facing your first technical round or an experienced developer aiming for a senior position. It has 60 questions in three levels, easy, medium and hard, each with a concise sample answer and, where it helps, runnable Python 3.12 code. Topics include data structures, OOP, generators, decorators, the GIL and concurrency, type hints, testing and performance. Answer each question aloud in your own words first, then compare with the sample answer and run the code to check your understanding.
Questions you may be asked
What is the difference between mutable and immutable types in Python?
What is the difference between a list and a tuple?
