职位类别： 财会/审计/统计 咨询/顾问 工作地点： 上海 发布日期： 2008-01-25 工作经验： 3-5年 最低学历： 本科 管理经验： 否 工作性质： 全职 招聘人数： 1人 职位描述/要求： Enterprise Risk Services (ERS) With continual technological innovation, increased accountability at boardroom and senior management levels and changes to the regulatory environment, managing risk has become more complex. Our Enterprise Risk Services combine to help clients better identify measure and manage risk and enhance the reliability of their control system and procedures. We can specifically help through: Accounting&Control Services, Business Continuity Planning, Computer Audit, ERP Controls Services, Internal Audit, IT Due Diligence, Management Analysis&Reporting Services, Secure eBusiness, Sarbanes-Oxley Readiness&Facilitation Services. Main Responsibility: - Help the audit teams to evaluate the system control of client"s organization and provide advice to the audit team in terms of system reliability, data integrity, and internal control effectiveness - Help audit teams to perform substantive tests by using Computer Assisted Audit Techniques (CAATs). This includes data extraction, analysis, recalculation and discrepancy resolutions. - Help clients to design policy&procedure and IT solutions to ensure system security - Responsible for performing vulnerability analysis and diagnosis at operating system, network and application level, and recommending security solutions to issues identified Requirement - University degree or above in Accounting, Computer Science, Finance or other related disciplines - Proven experience in information system audit, IT security and financial audit - Knowledge and experience on the following areas is a plus but not an essential: General computer management, system development process, IT operation, and financial audit techniques is preferred; Knowledge of business and system processes of commercial software, namely, ERP, CRM, SCM, and DRP/Logistic products; Specific product knowledge in SAP, Oracle Financials and other major ERP products; ERP system implementation, project management or process consulting are preferred. Familiar with technology standard, and network/system products. Specific knowledge in CA/PKI, firewall, IDS, OS, network, and e-business applications is preferred. Professional certificates, such as CISA, CISSP, CISM, RCE, RHCE, MCSE, MCDBA, CCDA, CCNA, CCSA, CCSE, OCP, MCP, CSA, CNA and SAP/Oracle Certification Experience and knowledge on Sarbanes-Oxley, COSO, COBIT, BS7799, identity management, project management is preferred - Candidates must have excellent command of both written and spoken in English. Also the Candidates should have an excellent command in both spoken and written Chinese (Putonghua) - Strong communication skills, self-initiation, teamwork spirit and willingness to work under pressure - Minimum of 3 years of working experience, including one year supervisory experience, is required for the Senior Consultant; over 2 years experience for Consultant 随着持续不断的技术创新、董事会和高级管理层问责制日益加强以及监管环境的改变，管理风险变得越来越复杂。我们的企业风险管理服务帮助客户更好地识别、衡量和管理风险，并增强控制系统和程序的可靠性。我们可以特别在以下方面给予协助：会计和控制服务、业务持续性规划、计算机审计、企业资源规划控制服务、内部审计、信息技术尽职调查、管理分析和报告服务、安全电子商务、萨奥法案就绪与促成服务。 职责 - 协助审计团队评估客户公司的系统控制并为审计团队提供系统可靠性、数据完整性及内部控制有效性方面的建议。 - 运用计算机辅助审计技术(CAATs) 协助审计团队执行实质性测试。这包括数据抽取、分析、重新计算和差异分析。 - 协助客户设计政策和程序及信息技术解决方案以确保系统安全。 - 负责在操作系统、网络和应用软件级别进行易损性分析和诊断，并就发现的问题提出安全解决方案。 - 会计、计算机科学、财务或其他相关专业大学或以上学历 - 我们寻求在信息系统审计、信息技术安全和财务审计领域有成功经验的候选人 - 具备下列领域的知识和经验更佳但并非必备条件： - 具备常规计算机管理、系统开发流程、信息技术运营及财务审计技术者为佳； - 具备商业软件（即企业资源规划、客户关系管理、供应链管理及分销资源计划/物流产品）的业务流程和系统流程的知识； - 具备SAP、Oracle Financials 及其他主要企业资源规划产品的专门知识； - 具备企业资源规划系统实施、项目管理或流程咨询知识经验者为佳。 - 熟悉技术标准及网络/系统产品。具备认证机构/公钥基础设施、防火墙、入侵检测系统、操作系统、网络和电子商务应用软件方面专门知识者为佳。 - 持有专业资格证书，如注册信息系统审计师、注册信息系统安全专家、注册信息安全员、RCE认证工程师、红帽认证工程师、微软认证系统工程师、微软认证数据库管理员、思科认证网络设计工程师、思科网络安装和支持认证助理、认证安全管理员、认证安全专家、Oracle认证专家、微软认证专家、CSA、Novell认证网络管理员和/或SAP/Oracle 认证资格 - 具备萨奥法案、COSO、COBIT、BS7799、身份管理、项目管理知识和经验者为佳 - 候选人必须具备优秀的中英文书面和口头表达能力 - 很强的沟通能力，积极主动，具有团队合作精神，愿意在压力下工作 - 高级顾问须至少3年工作经验，包括1年管理职位经验；顾问须2年以上经验 联系方式： .
|
|
