Job Title: Information Security & Cyber Compliance Audit Support

Location: New Delhi, India

Experience: 37 yrs

About Us:

Vitraya Technologies Pvt Ltd is a leading Insurance technology company specializing in cutting-edge solutions for the insurance sector. Our mission is to revolutionize the healthcare insurance industry by providing cutting-edge technology and exceptional services to our clients. With a focus on efficiency and Client satisfaction, we strive to create a seamless experience for both insurers and policyholders. As part of our commitment to excellence, we are dedicated to expanding our network of partner hospitals to ensure comprehensive access to quality healthcare for our members.

Job Overview

We are looking for an Information Security / Cyber Compliance professional with knowledge of information security frameworks, IT controls, and audit requirements, who can provide end-to-end support for internal, external, and regulatory audits at Vitraya. The role involves coordinating with auditors and internal stakeholders, understanding audit requirements, managing evidence, and tracking observations through to timely closure — supporting the security and compliance posture behind our claims platform.

Job Responsibilities:

- Support end-to-end Information & Cyber Security audits and compliance assessments, including ISO/IEC 27001, ISMS/ IT Audit / ITGC, HIPPA, DPDP, SOC 1 Type 1 & SOC 2 Type 2, Internal/External Audit, and Regulatory / Compliance Audits.
- Understand audit scope, requirements, control objectives, and evidence requirements.
- Coordinate with relevant process/control owners to collect, review, and organize audit evidence.
- Maintain audit trackers, evidence repositories, request lists, and status reports.
- Support auditor walkthroughs, discussions, and information requests.
- Perform preliminary review of evidence for completeness and alignment with audit requirements.
- Coordinate with stakeholders for timely responses to audit queries and evidence requests.
- Track audit observations, exceptions,



and management action plans through closure.
- Support preparation and review of policies, procedures, control documentation, and compliance matrices.
- Assist with ISO 27001 ISMS activities, including risk assessments, Statement of Applicability (SoA), internal audit support, and audit readiness.
- Support ITGC/control assessments covering access management, change management, IT operations, backup, incident management, and related IT controls.
- Assist in regulatory compliance assessments and remediation tracking.
- Prepare management reports and dashboards highlighting audit status, open items, risks, and remediation progress.

Skills and Specifications Required Skills:

- 3–7 years of experience in Information Security, Cyber Security, GRC, IT Compliance, IT Audit, or Risk & Compliance.
- Good working knowledge of ISO 27001, ITGC/IT Audit, SOC 1/SOC 2, and Internal Audit processes.
- Understanding of information security controls, risk management, and compliance requirements.
- Experience in audit coordination, evidence management, and stakeholder management.
- Strong documentation, communication, and analytical skills.
- Ability to manage multiple audit requests and coordinate with cross-functional teams.
- Experience with regulatory/cybersecurity compliance frameworks will be an added advantage.
- ISO 27001, CISA, CISM, or other relevant certifications will be preferred.
- Key Requirement: The candidate is not expected to independently perform or lead audits. However, they should have sufficient knowledge of Information Security and IT audit requirements to effectively support auditors and internal teams throughout the complete audit lifecycle — from audit planning and evidence collection through audit queries, observations, remediation, and closure.

How to Apply:

Interested candidates can share their updated resume with [email protected], with the subject line “Application – Information Security & Cyber Compliance (Audit Support)”. Please include your total experience, current location, and notice period in your email.

📌 Information Security And Compliance Officer (New Delhi)
🏢 Vitraya Technologies
📍 New Delhi