Company: INTERCERT INC

Location: Noida, Uttar Pradesh, India

Job Type: Full-Time

Work Arrangement: On-site

Experience: 3–4 Years

About INTERCERT INCINTERCERT INC is a multinational auditing and assessment company headquartered in Texas, United States, operating in more than 28 countries since 2009. We are committed to building a secure and sustainable world through customer-centric assessment, auditing, and certification services.

INTERCERT offers expertise across a broad range of information security, cybersecurity, and compliance frameworks, including ISO certifications, SOC 1/SOC 2 audits through its registered CPA firm, CSA STAR, HITRUST, CMMC, PCI DSS, and various data protection and cybersecurity compliance standards. The organization is also CREST International accredited for Vulnerability Assessment and Penetration Testing (VAPT) and security assessment services.

With a team of more than 250 assessors working in line with ISO/IEC 17021 requirements, INTERCERT continuously adapts to evolving business needs, industry standards, and regulatory requirements to deliver high-quality assessment services and exceed client expectations.

About the RoleINTERCERT INC is seeking a skilled and motivated Information Security & Compliance Auditor with 3–4 years of relevant experience in Governance, Risk & Compliance (GRC), information security auditing, IT risk management, and cybersecurity compliance assessments.

The primary focus of this role will be HITRUST CSF, along with ISO/IEC 27001:2022 and applicable Indian regulatory cybersecurity requirements. The successful candidate will also have opportunities to work on other information security and compliance frameworks, including SOC 1/SOC 2, CMMC, PCI DSS, and related industry standards, depending on project requirements.

This is a full-time, on-site role based in Noida. The candidate will be responsible for planning, conducting, and documenting audits and compliance assessments, evaluating security controls, reviewing evidence, identifying gaps, preparing reports, and supporting clients with remediation activities.

The role requires strong analytical and auditing capabilities, attention to detail, effective client communication, and the ability to deliver multiple assessment engagements within defined timelines.

Key Responsibilities

- Plan, conduct, and support HITRUST CSF assessments, readiness assessments, and control evaluations.
- Perform ISO/IEC 27001:2022 audits, gap assessments, and Information Security Management System (ISMS) compliance reviews.
- Conduct information security, IT risk, and regulatory compliance assessments across applicable industry frameworks.
- Review security policies, procedures, risk assessments, technical controls, operational processes, and supporting documentation.
- Conduct control testing, stakeholder interviews, evidence collection,



and evidence validation to assess control effectiveness.
- Evaluate compliance against applicable regulatory requirements, industry standards, and established security frameworks.
- Identify control deficiencies, non-conformities, compliance gaps, and areas for improvement.
- Prepare audit working papers, evidence trackers, compliance matrices, risk assessment documentation, and detailed audit reports.
- Communicate audit findings, risks, and practical recommendations to clients and relevant stakeholders.
- Support clients in developing corrective action plans, tracking remediation progress, and closing audit findings.
- Collaborate with internal assessment teams, client IT departments, cybersecurity teams, and management to ensure accurate and timely delivery of engagements.
- Maintain complete and accurate audit documentation in accordance with applicable methodologies and quality requirements.
- Manage multiple assignments, prioritize deliverables, and meet project deadlines while maintaining professional and ethical standards.

Regulatory & Compliance FrameworksCandidates should have strong knowledge of HITRUST CSF and familiarity with relevant information security and compliance frameworks.

Primary requirements:

- HITRUST CSF
- ISO/IEC 27001:2022
- Information Security Auditing and GRC
- Risk Assessment and Control Evaluation

Additional frameworks and regulatory exposure:

- SOC 1 and SOC 2
- CMMC
- PCI DSS
- HIPAA
- NIST Cybersecurity Framework and related standards
- GDPR and India's Digital Personal Data Protection (DPDP) framework
- ISO 27701 and CIS Controls
- CSA STAR

Indian regulatory and sector-specific requirements:

- RBI: IT governance, cybersecurity, and IT audit requirements
- NPCI: Payment security and compliance requirements
- IRDAI: Insurance-sector cybersecurity and IT compliance
- SEBI: Cybersecurity and cyber resilience requirements
- CERT-In: Applicable cybersecurity directions and incident-reporting requirements
- Applicable digital lending requirements
- Critical Information Infrastructure cybersecurity requirements, where relevant

Practical experience with one or more of these additional frameworks will be an advantage. Required Skills & Competencies
- Strong auditing capabilities, including audit planning, execution, evidence validation, control testing, and reporting.
- Strong understanding of HITRUST CSF assessment requirements and information security controls.
- Good knowledge of ISO/IEC 27001:2022 and ISMS audit practices.
- Experience in Governance, Risk & Compliance (GRC),



IT auditing, information security, or cybersecurity compliance.
- Knowledge of regulatory compliance, IT risk management, and security control assessment methodologies.
- Advanced analytical skills to interpret technical and procedural information, identify control gaps, and recommend practical remediation measures.
- Excellent documentation skills, including the preparation of audit reports, compliance matrices, and assessment deliverables.
- Effective written and verbal communication skills, with the ability to present findings to technical and non-technical stakeholders.
- Strong client coordination, stakeholder management, and problem-solving capabilities.
- Ability to manage multiple engagements, work independently, and meet deadlines.
- High professional integrity, attention to detail, and commitment to quality.

Qualifications & Certifications
- Bachelor's degree in Information Security, Computer Science, Information Technology, Cybersecurity, Auditing, or a related discipline.
- 3–4 years of relevant experience in information security, IT risk management, GRC, IT auditing, or compliance assessments.
- Hands-on HITRUST CSF assessment experience is highly preferred.
- A relevant HITRUST certification, including HITRUST CCSFP, will be an advantage.
- Certifications such as CISA, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, CISSP, CISM, or equivalent are beneficial.
- Experience in consulting, financial services, healthcare, technology, or other regulated industries is desirable.

Preferred Candidate ProfileThe ideal candidate is a detail-oriented information security professional who combines practical auditing experience with a strong understanding of security frameworks and regulatory compliance. Candidates should be comfortable interacting with clients, evaluating technical and procedural controls, documenting assessment results, and recommending actionable improvements. The ability to adapt to different frameworks, collaborate with cross-functional teams, and deliver high-quality work within defined timelines is essential.

Work Location & Employment Details

- Location: Noida, Uttar Pradesh, India
- Work Arrangement: In office
- Employment Type: Full-Time
- Experience Level: 3–4 Years

How to ApplyInterested candidates with relevant experience in HITRUST CSF, information security auditing, GRC, and regulatory compliance are encouraged to apply through LinkedIn with their updated resume. Join INTERCERT INC and contribute to strengthening information security, improving compliance maturity, and helping organizations build a more secure digital environment.

#Hiring #InformationSecurity #CyberSecurity #HITRUST #HITRUSTCSF #ISO27001 #GRC #ComplianceAuditor #ITAudit #RiskManagement #RegulatoryCompliance #SOC2 #PCIDSS #CMMC #CyberSecurityJobs #NoidaJobs #INTERCERT

📌 Information Security & Compliance Auditor (Noida)
🏢 INTERCERT
📍 Noida