Associate IT Audit Location: Noida, Uttar Pradesh

Department: Internal Audit

Employment Type: Full-time Employment

Work Mode: On-site

About Team The Internal Audit team at Paytm comprises seasoned professionals with diverse skill sets and experience across different verticals like process audits, technology audits and forensics. The team focuses on implementing the approved audit plan, ensuring delivery of qualitative audits and conducting internal / special reviews while leveraging technology & data analytics and gauging key risks across business processes.

About the Role We are seeking an experienced and detail-oriented Information Security and Cloud Security Auditor to join our team. The ideal candidate will have 3-7 years of expertise in data security and privacy control implementation, internal auditing, third-party risk management, cybersecurity governance, and cloud security (banking sector preferred). This role will be responsible for conducting comprehensive IT and cloud security audits, ensuring compliance with regulatory requirements, and enhancing our information security policies and procedures.

Key Responsibilities

- Conduct IT and cloud security audits across various domains, including IT General Controls, Information Security Controls, Cloud Security, Network Security, Vulnerability Management, and Vendor Risk compliance with relevant laws, regulations, and organizational policies.
- Provide expertise in regulatory requirements specific to both on-premises and cloud environments.
- Enhance information security and cloud security policies and procedures in alignment with industry best practices.
- Thoroughly document audit findings, risk assessments, and security measures for internal and external audits.
- Manage audit documentation including risk assessments, working papers, audit program checklists, and evidence.
- Follow up on and ensure closure of non-compliance issues identified during audits.




- Oversee third-party risk assessments and audits, ensuring robust security controls are in place for both traditional and cloud-based service providers.
- Participate in the development, migration, and implementation of security controls and policies for network and cloud security.
- Conduct risk-based security assessments on internal, vendor, and third-party hosted environments, focusing on both traditional IT and cloud environments.
- Contribute to the implementation and integration of new technologies, with a strong emphasis on cloud security solutions.

Experience/Skills Required

- Minimum 2 years of experience in information security and auditing, with a robust background in cloud security, ideally in the banking and IT sectors.
- Experience in performing IT and cloud security audits, validating ITGC and cloud application controls, and maintaining audit documentation.
- Proficiency in vulnerability management, risk management, physical security, identity & access management, encryption, secure development, incident management, security infrastructure, and security policy for both on-premises and cloud environments.
- Experience in third-party risk management, regulatory compliance, and managing IT audit findings in both traditional and cloud-based environments.
- Strong analytical and problem-solving skills.
- Excellent communication and documentation skills to manage multiple projects effectively.
- Understanding of IT, cloud security, and cybersecurity frameworks.
- Familiarity with various security assessment tools and technologies,



particularly those related to cloud environments.

Qualifications & Certification

- Bachelor's/Master's degree in Information Technology, Cyber Security, or a related field.
- Relevant certifications such as ISO 27001, CNSS, CCNA, CISA, CISM, CISSP preferred.
- Detailed knowledge of security tools, PCI-DSS, general ITGC controls, compliance testing, cloud risk assessment, GRC, OWASP, MITRE ATT&CK;, change management, and policies.
- Experience with various security and cloud technologies including AWS, Azure, Google Cloud Platform, Palo Alto, Fortinet & Checkpoint Firewalls, SOAR (Cortex), Force scout.

Why Join Us

1. A collaborative output-driven program that brings cohesiveness across businesses through technology.
2. Improve the average revenue per user by increasing cross-sell opportunities.
3. A solid 360 feedback from your peer teams on your support of their goals.
4. Respect, that is earned, not demanded from your peers and manager.

Compensation If you are the right fit, we believe in creating wealth for you. With enviable 500 mn registered users, 21 mn merchants, and depth of data in our ecosystem, we are in a unique position to democratize credit for deserving consumers & merchants - and we are committed to it. India's largest digital lending story is brewing here.

It's your opportunity to be a part of the story!

Note on Hiring Process We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans.

If you would like more information about how your data is processed, please contact us.

📌 Paytm - Associate IT Audit (India)
🏢 Paytm
📍 India