Job Title: Information Security & IT Audit Specialist
Job Summary
We are seeking an experienced Information Security & IT Audit Specialist to strengthen our organization's information security governance, risk management, compliance, and audit functions. The role involves conducting technology audits, evaluating security controls, ensuring compliance with industry standards, performing risk assessments, and supporting the organization's cybersecurity and data protection initiatives.
Key Responsibilities
Information Security & IT Audit
Independently execute Technology Audit assignments covering:
Cyber Security
Data Privacy
Information Security Governance
Business Continuity Management (BCM)
IT General Controls (ITGC)
IT Application Controls
IT Planning, Implementation, and Operations
Network Security, Perimeter Security & DMZ Security
Enterprise Architecture Reviews
Vendor and Contract Evaluations
Risk Assessment & Compliance
Perform Information Security Risk Assessments and Impact Analysis.
Evaluate the design and operating effectiveness of security controls.
Identify security vulnerabilities, control gaps, and recommend remediation measures.
Ensure compliance with Information Security frameworks and standards such as:
ISO 27001
NIST SP 800-53
PCI DSS
COBIT
CISA Frameworks
Other applicable regulatory and industry standards.
Policy & Governance
Create, review, update, and maintain Information Security Policies, Standards, Procedures, and Guidelines.
Develop and maintain audit programs, audit checklists, risk registers, and supporting documentation.
Document Standard Operating Procedures (SOPs), process flowcharts, and control matrices.
Security Testing & Monitoring
Work closely with Vulnerability Assessment and Penetration Testing (VAPT) teams to review findings and ensure timely closure of identified vulnerabilities.
Validate remediation actions and track closure of audit observations.
ISMS Management
Conduct Internal and External Information Security Management System (ISMS) audits.
Support ISO 27001 implementation, certification, surveillance, and recertification activities.
Monitor compliance with ISMS controls and ensure continual improvement initiatives.
Data Analysis & Reporting
Develop audit queries, scripts, and reports to extract and analyze security-related data.
Benchmark security controls and processes against industry best practices.
Prepare audit reports, management presentations, and compliance dashboards for senior leadership.
Required Qualifications
Bachelor's Degree in Information Technology, Computer Science, Information Security, Cyber Security, or related discipline.
3–8 years of experience in Information Security, IT Audit, Risk Management, or Compliance functions.
Strong understanding of Information Security principles, IT controls, governance, risk management, and compliance frameworks.
Experience conducting technology audits and security assessments.
Knowledge of network security, application security, cloud security, and business continuity practices.
Excellent analytical, documentation, and stakeholder management skills.
Preferred Certifications
Certified Information Systems Auditor (CISA) – Preferred
ISO 27001 Lead Auditor (LA) – Preferred
ISO 27001 Lead Implementer – Added Advantage
CISSP, CISM, CEH, or other relevant Information Security certifications are desirable.
Key Skills
IT Audit & Information Security Audits
Cyber Security Governance
ISMS (ISO 27001)
Risk Assessment & Control Evaluation
Data Privacy & Compliance
VAPT Coordination
ITGC & Application Controls
Business Continuity Management
Security Policy Development
Regulatory Compliance
Audit Reporting & Documentation
Stakeholder Management
Desired Candidate Profile The ideal candidate should possess strong expertise in Information Security, Technology Audits, Risk Management, and Compliance. The individual should be capable of independently managing audit assignments, driving security governance initiatives, and ensuring adherence to industry best practices and regulatory requirements.
Key Responsibilities:
Job Title: Information Security & IT Audit Specialist
Job Summary
We are seeking an experienced Information Security & IT Audit Specialist to strengthen our organization's information security governance, risk management, compliance, and audit functions. The role involves conducting technology audits, evaluating security controls, ensuring compliance with industry standards, performing risk assessments, and supporting the organization's cybersecurity and data protection initiatives.
Key Responsibilities
Information Security & IT Audit
Independently execute Technology Audit assignments covering:
Cyber Security
Data Privacy
Information Security Governance
Business Continuity Management (BCM)
IT General Controls (ITGC)
IT Application Controls
IT Planning, Implementation, and Operations
Network Security, Perimeter Security & DMZ Security
Enterprise Architecture Reviews
Vendor and Contract Evaluations
Risk Assessment & Compliance
Perform Information Security Risk Assessments and Impact Analysis.
Evaluate the design and operating effectiveness of security controls.
Identify security vulnerabilities, control gaps, and recommend remediation measures.
Ensure compliance with Information Security frameworks and standards such as:
ISO 27001
NIST SP 800-53
PCI DSS
COBIT
CISA Frameworks
Other applicable regulatory and industry standards.
Policy & Governance
Create, review, update, and maintain Information Security Policies, Standards, Procedures, and Guidelines.
Develop and maintain audit programs, audit checklists, risk registers, and supporting documentation.
Document Standard Operating Procedures (SOPs), process flowcharts, and control matrices.
Security Testing & Monitoring
Work closely with Vulnerability Assessment and Penetration Testing (VAPT) teams to review findings and ensure timely closure of identified vulnerabilities.
Validate remediation actions and track closure of audit observations.
ISMS Management
Conduct Internal and External Information Security Management System (ISMS) audits.
Support ISO 27001 implementation, certification, surveillance, and recertification activities.
Monitor compliance with ISMS controls and ensure continual improvement initiatives.
Data Analysis & Reporting
Develop audit queries, scripts, and reports to extract and analyze security-related data.
Benchmark security controls and processes against industry best practices.
Prepare audit reports, management presentations, and compliance dashboards for senior leadership.
Required Qualifications
Bachelor's Degree in Information Technology, Computer Science, Information Security, Cyber Security, or related discipline.
3–8 years of experience in Information Security, IT Audit, Risk Management, or Compliance functions.
Solid understanding of Information Security principles, IT controls, governance, risk management, and compliance frameworks.
Experience conducting technology audits and security assessments.
Knowledge of network security, application security, cloud security, and business continuity practices.
Excellent analytical, documentation, and stakeholder management skills.
Preferred Certifications
Certified Information Systems Auditor (CISA) – Preferred
ISO 27001 Lead Auditor (LA) – Preferred
ISO 27001 Lead Implementer – Added Advantage
CISSP, CISM, CEH, or other relevant Information Security certifications are desirable.
Key Skills
IT Audit & Information Security Audits
Cyber Security Governance
ISMS (ISO 27001)
Risk Assessment & Control Evaluation
Data Privacy & Compliance
VAPT Coordination
ITGC & Application Controls
Business Continuity Management
Security Policy Development
Regulatory Compliance
Audit Reporting & Documentation
Stakeholder Management
Desired Candidate Profile The ideal candidate should possess strong expertise in Information Security, Technology Audits, Risk Management, and Compliance. The individual should be capable of independently managing audit assignments, driving security governance initiatives, and ensuring adherence to industry best practices and regulatory requirements.
📌 Information Security Lead (Mumbai)
🏢 Sboss
📍 Mumbai