Reporting Structure :

- Reports to AVP

Education :

- Graduate in Computer Science/IT or B. Tech or BCA

Certifications :

- CISA / CISM / CISSP / CEH / CRISC
- ISO 27001 Lead Auditor/Lead Implementer
- Additionally, domain-specific certifications below may be preferred.

Application & API Security :

- MCSD
- Certification in Mobile application security testing
- Java certifications
- Certifications in API security

Database Security :

- MCDBA
- Oracle database
- Certification in big data / analytics

Network Security :

- CCNA
- Certified Firewall administrator

Payments Security :

- Relevant certifications into ATM security, Cards / Payments security

Cloud Security :

- CCSK/CCSP

Experience :

- 8 years of experience in the field of Information Security Operations, Information System Audits encompassing experience into any of the Banking Technologies Domains Application Security, Database management and administration, / Network security and SOC / Payment systems in addition to IT General controls (ITGC).
- Exposure to the Banking / Finance / Payment industry domains would be preferrable.




- Should have valuable understanding of Cyber Security requirements from RBI & Cert-in.

Responsibilities :

- Candidate will have to travel to perform audits, as per RBI requirements.
- Conducting audit of Information security policies, procedures, and processes to identify process/design gaps.
- Conduct audits of information security systems and infrastructure to verify systems are secure and support the related applications/business processes.
- Conducts audits in different banking technology domains such as Active Directory, WAF, Network access security, End-point security, Application VA/PT/AppSec, SDLC, Database management and security, PCI-DSS, ATM controls, Cards (Debit/Credit) security, Payment-gateway, Cloud and API Security and IT General Controls etc.
- Developing project plans, work programs, evaluating system controls, identify risks and audit gaps, documenting results in proper audit report format, making recommendations, and communicating information to stakeholders.
- Support in maintaining audit checklist and documents, trend analysis, preparing presentations etc.

📌 Lead Auditor - Cyber Security Domain (India)
🏢 Etaash Consultants
📍 India