The ideal candidate for this role must be an experienced IT & Infosec audit professional with strong understanding of information security and system architecture, and a robust level of comfort with IT infra, related security measures and automations.

Key Responsibilities :

- Assist in the execution of application security audits, supporting the approved Audit Plan.
- Participate in security audits, helping to identify vulnerabilities across applications and infrastructure.
- Support the audit process by gathering information and documenting findings.
- Collaborate with audit team members to discuss audit findings and assist in developing action plans.
- Learn and utilize data analytics and Automation knowledge to enhance the efficiency of audit execution.
- Stay informed about best practices in information security to contribute to team discussions.
- Keep updated on emerging security threats and trends to support internal audit processes.
- Compliance Auditing : Perform internal and external audits to ensure adherence to standards like ISO 27001, PCI DSS, and HIPAA.
- Risk & Control Assessment : Evaluate the effectiveness of IT controls, including access management, change management, and security policies.
- Vulnerability Assessment : Conduct tests on infrastructure, applications, and networks to identify security weaknesses.
- Reporting : Prepare detailed, high-level, and technical reports for stakeholders summarizing findings, risks,



and remediation recommendations.
- Policy Review : Analyze security policies, procedures, and documentation to ensure they align with industry best practices.
- Remediation Support : Assist teams in developing action plans to address identified security gaps.

What Were Looking For :

- 9 to 14 years of experience in technology audits or related fields, internships or academic projects included.
- Basic understanding of security concepts and practices in IT environments.
- Familiarity with tools used for security testing (e.g., Burp Suite, NMAP) is a plus.
- Exposure to programming languages (e.g., Python) and an interest in AI technologies are advantageous.
- Strong analytical skills and attention to detail.
- Good written and verbal communication skills.
- Ability to work collaboratively in a team-oriented environment.
- Excellent ability to explain complex technical vulnerabilities to non-technical staff and leadership.
- Deep understanding of networking, operating systems, databases, and security tools (e.g., firewall, SIEM).

Basic Qualifications :

- A bachelors degree in information technology, computer science, or a related field.
- Experience with integrated audits, electronic work papers and standard productivity tools.
- Strong academic and professional credentials.
- Professional certifications preferred (CISA, CISM, CISSP etc.).

Education Qualification :

- CISA / CISM

📌 IT & Infosec Audit Professional (India)
🏢 Black Turtle
📍 India