Key Responsibilities:

- Conduct information security audits and gap assessments against ISO 27001, ISO 27701, ISO 22301, NIST CSF, COBIT, PCI DSS, and CIS Controls.
- Assess regulatory compliance with RBI, SEBI CSCRF, IRDAI, UIDAI, CERT-In, and other applicable guidelines.
- Perform IT risk assessments, security control testing, and third-party/vendor risk assessments.
- Develop and review security policies, procedures, risk registers, and compliance documentation.
- Prepare audit reports, identify security gaps, and recommend corrective actions.
- Coordinate with clients and support regulatory inspections and external audits.

Qualifications & Skills:

- An engineering degree in IT, Computer Science, Cybersecurity, or a related discipline is preferred.
- ISO 27001:2022 Lead Auditor certification.
- Knowledge of information security frameworks, DPDP Act, GDPR, and cybersecurity regulations.
- Certifications such as CISA,



CISM, CRISC, CEH, ISO 27701 LA, or ISO 22301 LA.
- Robust analytical, documentation, communication, and client-handling skills.

Role: IT & Information Security - Other, Industry Type: Emerging Technologies (Cybersecurity), Department: IT & Information Security, Employment Type: Full Time, Permanent Role Category: IT & Information Security - Other Education UG: B.Tech / B.E. in Any Specialization PG: M.Tech in Any Specialization Key Skills Skills highlighted with ‘‘ are preferred keyskills CismISO 27001 Lead AuditorCisspCisaISO 27701 CcspRisk AssessmentCobitCompliance ManagementNpciRisk ManagementPCI QSACriscCSCRFSEBI ComplianceHitrustNciipcGRCNistRisk ComplianceISO 22301Regulatory Compliance

📌 GRC Auditor (Noida)
🏢 Allied Boston Consultants India
📍 Noida