Brookfield | Sr. Analyst, IT Risk, Audit & Governance

Key responsibilities

• Technology Services (TS) is responsible for delivering all enterprise infrastructure, applications and related end user technology services across all Brookfield business groups.
• The Senior Analyst is responsible for supporting internal and external audit, execute attestation, and governance activities within the IT Risk and Compliance program.
• This role supports audit readiness, performs control assessments, and collaborates with stakeholders to ensure compliance with internal policies and external requirements.
• The position focuses on delivering high-quality audit support and governance outcomes.
• Support internal and external audits by coordinating requests, gathering evidence, and facilitating discussions.
• Execute control assessments and compliance reviews to evaluate design and operating effectiveness.
• Perform vendor risk assessments and review third-party control reports from an IT risk standpoint.
• Validate control deficiencies and track remediation activities to completion.
• Collaborate with stakeholders to assess risk and provide recommendations for mitigation.
• Support the development and enhancement of reporting tools and dashboards.
• Contribute to governance processes related to cloud and security environments.
• Identify opportunities to improve processes and enhance efficiency.
• Reports To: ITRC Manager

Requirements

• Experience supporting SOX and IT audits, ITGC testing within SOX compliance programs, and compliance assessments such as NIST and SWIFT Customer Security Programme (CSP).
• Experience with cloud and security governance practices, including basic knowledge of cloud environments and experience supporting cloud audits and cloud risk assessments.
• Experience in IT vendor risk management or third-party assessments is a good to have.
• Experience working with governance and reporting tools such as AuditBoard, OneTrust is a plus.
• Experience with SOC 1/SOC 2 report reviews and audit coordination.
• Basic knowledge of security vulnerability management practices and processes.
• Strong analytical and problem-solving skills.
• Understanding of IT control frameworks and compliance practices.
• Effective communication and collaboration skills.
• Ability to manage multiple priorities and deadlines.
• Knowledge of GRC platforms such as OneTrust and AuditBoard.
• Understanding of cloud environment risks and security vulnerability management concepts.
• Professional certifications such as CISA and/or CISSP.
• Experience with ServiceNow is an added advantage.

Brookfield

Brookfield is an employer hiring in India (sector: BFSI / Investments / Insurance). In its own words: "Brookfield is a leading global investment firm, investing on behalf of institutions and individuals around the world."

Its finance, accounts, audit and tax openings in India are mostly in Toronto and Brookfield Place.

• Industry: BFSI / Investments / Insurance