The role will require the successful applicant to assist with the design, documentation, and implementation of security processes and to work with Ness and their client staff to collect and collate SOC 2 information and related SOC 2 controls evidence. This role is primarily responsible for SSAE SOC 2 (and SOC 1) Program Documentation and upkeep of all related artifacts. o Key Responsibilities Person that has maintained and supported the SSAE program and Has performed a documentation for the same. Along with SSAE, Knowledge of IT Services in Finance Domain, IT Service Controls and other similar compliance audits. Knowledge of policies and process of the program and Assisting in responding to customer questionnaire and RFP responses. Maintaining all related Artifacts on intranet and repository under document control & access management. Assist the preparation and the implementation of necessary documentation such as but not limited to policies, standards, procedures and guidelines, in conjunction with the Security Requirements and to get appropriate approvals and feedback. Understanding the Firm and its professional service lines. Actively encouraging team members to contribute ideas and identify potential opportunities to improve services. Excellent interpersonal, communication and report writing skills. Ability to serve on and manage multiple IT Audit engagements at a time, working with team members throughout our firm. Analyzing and evaluating information technology (IT) risks and controls based upon relevant IT control frameworks Strong understanding of relationship between IT general controls, application controls, and use of Service Organizations and how they impact the control environment. Maintaining a strong client focus by understanding the clients business needs while developing productive working relationships with client personnel in order to accomplish audit objectives. Strong technical knowledge of relevant audit standards e.g., SSAE16 SOC 1, AT101 SOC 2 etc. o Desired Candidate Profile To work closely with colleagues in India and other locations as needed and deliver programs Closely handling interactions with Client and Ness management Maintenance of Documentation and Artifacts. The role will require close working relationships with business, operations and systems line managers, Information Security related compliance offices in India and other locations A quick learner with desire to expand the scope in the areas of BCMS, PCI-DSS etc.