Key Responsibilities:
Conduct information security audits and gap assessments against ISO 27001, ISO 27701, ISO 22301, NIST CSF, COBIT, PCI DSS, and CIS Controls.
Assess regulatory compliance with RBI, SEBI CSCRF, IRDAI, UIDAI, CERT-In, and other applicable guidelines.
Perform IT risk assessments, security control testing, and third-party/vendor risk assessments.
Develop and review security policies, procedures, risk registers, and compliance documentation.
Prepare audit reports, identify security gaps, and recommend corrective actions.
Coordinate with clients and support regulatory inspections and external audits.

Qualifications & Skills:
An engineering degree in IT, Computer Science, Cybersecurity, or a related discipline is preferred.
ISO 27001:2022 Lead Auditor certification.
Knowledge of information security frameworks, DPDP Act, GDPR, and cybersecurity regulations.
Certifications such as CISA, CISM, CRISC, CEH, ISO 27701 LA, or ISO 22301 LA.
Solid analytical, documentation, communication, and client-handling skills.

📌 Grc Auditor Noida
🏢 Allied Boston Consultants India
📍 Noida