Role & responsibilities -

- Basic understanding of ISO/ 27001:2022 Information Security Management System (ISMS).
- Working knowledge of PCI DSS v4.0 requirements
- Basic understanding of SOC 2 Type II
- Knowledge of internal audit principles, audit lifecycle, evidence collection, and documentation.
- Ability to review policies, procedures, configurations, and operational processes against control requirements.
- Strong analytical and problem-solving skills with attention to detail.
- Good report writing and documentation skills.
- Proficiency in Microsoft Office (Excel, Word, PowerPoint).

Preferred Technical Knowledge -

Basic understanding of:

- Network Security
- Firewalls
- Active Directory / Identity & Access Management
- Windows/Linux environments
- Cloud platforms (AWS/Azure preferred)
- Endpoint Security / Antivirus / EDR
- Vulnerability Assessment & Patch Management
- Backup & Disaster Recovery




- Log Monitoring and SIEM concepts

Preferred Qualifications -

- Bachelors degree in computer science or B.Tech, Information Technology, Cyber Security, or related field.
- 1 to 3 years of experience in Information Security, IT Audit, Internal Audit, Compliance, or Risk Management.
- Relevant certifications (preferred but not mandatory):
- ISO/IEC 27001 Internal Auditor
- ISO/IEC 27001 Lead Auditor (added advantage)

Key Competencies -

- Excellent communication skills.
- Conducting MRM
- Strong documentation and report-writing ability.
- Ability to work independently and within timelines.
- High level of integrity and confidentiality.
- Eagerness to learn current compliance frameworks and technologies.

📌 Technical Auditor (Information Security) - Internal Audit Team (Noida)
🏢 Kalkine Consultancy
📍 Noida