· Plan, execute, and document
internal IT infrastructure audits covering network, servers, cloud platforms,
identity management, endpoint security, and access controls.

· Perform gap analyses against
frameworks such as PCI‑DSS, ISO 27001,
GDPR, DPDP or other customer‑specific
standards, identifying non‑compliance and
recommending remediation.

· Maintain and update policy,
process, and control documentation for internal IT and security policies,
including SOC documentation, SOPs, and procedure manuals.

· Coordinate with IT
administrators, security teams,



and customer contacts to collect evidence,
validate control implementation, and prepare for external audits or customer
reviews.

· Assist in preparing compliance
reports, dashboards, and artefacts (e.g., network diagrams, control matrices,
evidence packs) for internal stakeholders and customers.

· Track and manage compliance
timelines, findings, and remediation for internal audits, customer assessments,
and regulatory reviews.

· Support the implementation of
security controls around AD, Azure, MDM, DLP, EPP, and other relevant
technologies based on audit and compliance requirements.

· Stay updated on emerging
regulations, standards, and best practices relevant to cloud, SaaS, and managed‑services environments.

Required skills and
qualifications