Job Description
Educational Qualification
Essential:
BE /BTech/ BSc IT/MCA
Desirable:
2 to 5 Years of prior experience in Audit and compliance.
Business/ Technical Skills Sets
Essential:
· Professional certification such as ISO 27001:2022 Lead Auditor and Implementer.
· Minimum of 2 years of experience in ISMS, ITGC, and GITC audits.
· In-depth knowledge of ISO 27001, Cybersecurity Framework, and other relevant standards.
· Strong understanding of IT infrastructure, network security, and information security best practices.
· Excellent analytical and problem-solving skills with attention to detail.
· Effective communication skills to present findings and interact with stakeholders at all levels.
· Ability to work independently and manage multiple priorities in a dynamic environment.
· ISO 27001:2022 Lead Auditor / Implementer certified
Desirable:
i) Financial domain would be an added advantage.
ii)ISO 20000 Certified Lead Auditor / Implementer
iii) ISO 22301 (BCMS) Lead auditor / Implementer
Job Profile
· Conduct audits of Information Security Management Systems (ISMS) to assess the effectiveness of controls and compliance with ISO 27001 standards.
· Evaluate IT General Controls (ITGC) including logical access controls, change management, and backup procedures to ensure they are operating effectively.
· Review General IT Controls (GITC) such as change management, and computer operations procedures.
· Identify and assess risks related to information security and IT governance, and recommend corrective actions and improvements.
· Monitoring tracking of audit recommendations and management responses.
· Stay current with industry trends, emerging risks, and best practices in information security and IT governance.
· Provide guidance and support to stakeholders on audit-related matters.
· Flexible hours may be necessary to accommodate audit schedules and deadlines.