Responsibilities

- Understand audit scope, define audit objectives, and develop audit plans and audit programs

- Perform Cyber Security Audits, IT Audits, and ITGC Audits in line with industry standards and regulatory requirements

- Execute regulatory audits such as RBI, SEBI, and IRDAI Cyber Security / IT Audits

- Conduct SOX ITGC testing, PCI DSS assessments, and SOC 1 / SOC 2 audits

- Review and evaluate IT security governance, IT policies, and IT control frameworks

- Assess access management, change management, IT operations, database, network, and data center controls

- Identify risks and evaluate the design and effectiveness of IT controls

- Execute audit test procedures, review and analyse audit evidence, and document observations

- Compare client processes with industry best practices and standards such as ISO 27001, COBIT, COSO, and NIST

- Identify control gaps and provide practical, risk-based recommendations for remediation

- Prepare high-quality audit reports and client presentations

- Provide timely status updates and final deliverables to clients

- Act as a client-facing point of contact, coordinating with client stakeholders and senior management

- Manage multiple audit assignments simultaneously and ensure timely completion

- Lead and mentor junior team members, review their work, and support their technical development

- Develop and maintain audit checklists, procedures, and audit documentation

- Stay updated on emerging technologies, cyber risks, and regulatory requirements

- Collaborate with internal teams and leadership for successful project delivery





- Travel to client locations as required for audit assignments

Skills Required

- Experience: 2-10 years in Cyber Audit / IT Audit / ITGC Audit

- Educational Qualification:

- B.Sc. IT / MCA / B.Tech / B.E. (CS/IT/Cyber Security)

- CA / DISA - Added advantage

- Required Knowledge &
- Skills:

- Strong experience in Cyber Audit, IT Audit &

- ITGC Audit

- Exposure to SEBI, RBI &

- IRDAI Audits

- Knowledge of SOX, PCI DSS, SOC 1 &

- SOC 2

- Familiarity with ISO 27001, COBIT, COSO &

- NIST

- Understanding of Access Controls, Change Management, IT Operations, Network Security, Databases, Applications &

- Data Center Controls

- Experience in Risk Assessment &

- Control Evaluation

- Solid client handling, communication & report-writing skills

- Team handling & project management experience for senior roles

- Preferred Certifications:

- CISA / DISA / CISM / CISSP

- ISO 27001 Lead Auditor / Implementer

- Preferred Tools:

- MS Excel, ACL, IDEA, Tableau & other data analytics tools

- Key Competencies:

- Client & stakeholder management

- Analytical & problem-solving skills

- Ability to manage multiple projects & deadlines

- Leadership & team mentoring

- Strong presentation & report-writing skills

Qualification: B.Sc. IT / MCA / B.Tech / B.E. (CS/IT/Cyber Security | Openings: 7

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Cyber Audit Specialist - ITGC & Cyber Security Audit (Mumbai)
🏢 Kirtane u0026 Pandit
📍 Mumbai