Specialist II, Audit & Advisory (IT and Cybersecurity Audit)

TransUnion's Job Applicant Privacy Notice

Team Overview

The Global Audit & Advisory (GAA) function is an independent and objective assurance and advisory organization that helps strengthen governance, risk management, and internal controls across the enterprise. The India Global Capability Center (GCC) serves as a strategic extension of the global GAA organization, providing audit and advisory support across the United States, United Kingdom, APAC, Africa, and Global business functions.
The IT & Cybersecurity team within GAA GCC partners with global stakeholders to assess technology and cybersecurity risks, evaluate the effectiveness of controls, and provide insights that support business resiliency and regulatory compliance. The team executes audits and advisory engagements covering cybersecurity, cloud technologies, infrastructure, identity and access management, vulnerability management, SDLC, data protection, disaster recovery, and emerging technology initiatives.
This role offers exposure to a broad range of technologies, cybersecurity domains, cloud platforms, and business initiatives, providing significant opportunities for professional growth and global stakeholder engagement.

This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Role Overview And Core Responsibilities

• Support the planning and execution of IT and cybersecurity audits, advisory reviews, and risk assessments.
• Evaluate the design and operating effectiveness of IT and cybersecurity controls across applications, infrastructure, databases, networks, and cloud environments.
• Evaluate the design and operating effectiveness of IT General Controls (ITGCs), cybersecurity controls, and technology governance processes.
• Assess key areas including cybersecurity, access management, cloud security, incident management, business continuity, disaster recovery, and system implementations.
• Perform control testing, analyze results, and document audit conclusions and observations.
• Prepare audit reports and communicate risks, control gaps, and remediation recommendations to stakeholders.
• Communicate observations, control weaknesses, and associated risks to stakeholders in a clear and professional manner.
• Where appropriate, lead portions of engagements and facilitate discussions regarding remediation actions and risk mitigation strategies.
• Track and monitor remediation activities for open audit findings and validate the implementation of corrective actions.
• Stay informed of emerging cybersecurity threats, industry trends, and leading practices, while contributing to departmental initiatives and continuous improvement efforts.
• Build and maintain effective relationships with global stakeholders while preserving audit independence
• Participate in departmental initiatives, special projects, knowledge-sharing activities, and continuous improvement efforts that support GAA objectives and strategic priorities

Required Knowledge And Experiences

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• 3-7 years of experience in IT Audit, IT Risk, IT Assurance, or Information Security, including at least 2 years with a public accounting or professional services firm.
• Strong understanding of IT and cybersecurity frameworks, including NIST, CIS Controls, ISO 27001, and COBIT.
• Knowledge of key information security domains, including governance and risk management, access management, cloud security, network security, security architecture, application security, incident management, and business continuity/disaster recovery.
• Experience assessing IT and cybersecurity controls across on-premises and cloud environments, with a solid understanding of infrastructure, operating systems, databases, networking, and vulnerability management.
• Familiarity with security and governance tools such as Splunk, SailPoint IIQ, BMC Remedy, and audit management tools such as Optro (formerly AuditBoard).
• Strong analytical, risk assessment, problem-solving, and communication skills, with the ability to effectively engage both technical and non-technical stakeholders.
• Self-motivated and adaptable, with the ability to manage multiple priorities, work independently, and respond effectively to changing business needs.
• Professional certification such as CISA or CISSP required.

TransUnion Overview:

At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence.

Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology.

TransUnion Job Title

Specialist II, Audit and Advisory