Key Responsibilities:

- Conduct information security audits and gap assessments against ISO 27001, ISO 27701, ISO 22301, NIST CSF, COBIT, PCI DSS, and CIS Controls.
- Assess regulatory compliance with RBI, SEBI CSCRF, IRDAI, UIDAI, CERT-In, and other applicable guidelines.
- Perform IT risk assessments, security control testing, and third-party/vendor risk assessments.
- Develop and review security policies, procedures, risk registers, and compliance documentation.
- Prepare audit reports, identify security gaps, and recommend corrective actions.
- Coordinate with clients and support regulatory inspections and external audits.

Qualifications & Skills:

- An engineering degree in IT, Computer Science, Cybersecurity, or a related discipline is preferred.
- ISO 27001:2022 Lead Auditor certification.
- Knowledge of information security frameworks, DPDP Act, GDPR, and cybersecurity regulations.
- Certifications such as CISA, CISM, CRISC, CEH, ISO 27701 LA, or ISO 22301 LA.
- Robust analytical, documentation, communication, and client-handling skills.

📌 GRC Auditor (Noida)
🏢 Allied Boston Consultants India
📍 Noida