Audit Compliance with TPRM Support

Job Title: Audit and compliance support with TPRM L2

Location: Ghansoli, Navi Mumbai

Experience: 5+ years

Key Responsibilities:

• Support cybersecurity audits, assessments, compliance reviews, and evidence management activities across internal and customer environments.
• Coordinate collection, validation, and maintenance of audit evidence, control documents, SOPs, reports, configurations, and compliance artifacts.
• Track closure of audit observations, non-conformities, risk findings, and remediation actions with relevant stakeholders.
• Assist in implementation and monitoring of security and compliance requirements aligned to internal policies, contractual commitments, and regulatory obligations.
• Review security and compliance requirements for vendors, partners, service providers, and outsourced engagements.
• Assist in control mapping against frameworks such as ISO 27001, NIST, SOC requirements, customer requirements, sectoral regulations, and organization policies.
• Prepare governance dashboards, audit status reports, closure summaries, compliance trackers, and management updates.
• Coordinate with internal teams such as SOC, cloud, infrastructure, network, application, HR, procurement, and legal for audit / compliance dependencies.
• Support policy reviews, process documentation, and control evidence standardization.
• Ensure timely follow-up with stakeholders for pending evidence, action items, exceptions, and risk treatment plans.
• Participate in risk reviews, governance forums, and compliance program activities as required.
• Support customer questionnaires, due diligence responses, and assurance documentation related to cybersecurity controls.

Qualification and Work Experience

Qualification: BE / BTech / MCA / MTech (Similar Education Background)

Certifications: ISO 27001 LA / LI, CISA, CRISC, CISM, or equivalent.

Work experience: Minimum 5 years of hands-on audit and compliance experience within Insurance, Reinsurance, BFSI, or regulated financial services

• Candidate should have experience in audit support, cybersecurity compliance, or governance functions.
• Good understanding of control documentation, evidence management, remediation tracking, and audit coordination.
• Familiarity with security compliance frameworks such as ISO 27001, NIST CSF, SOC 1/2, PCI DSS, COBIT, and/or sector-specific regulatory frameworks, sector-specific regulatory requirements.
• Understanding of third-party risk management lifecycle and vendor assessment processes.
• Good documentation, reporting, and follow-up management skills.
• Ability to coordinate across technical and non-technical stakeholders for audit readiness and closure.
• Preferred: Experience with risk registers, compliance tools, and governance reporting.
• Familiarity with data privacy obligations under the DPDP Act and GDPR, as applicable to insurance and reinsurance data
• Deep understanding of the regulatory environment governing reinsurance and insurance in India, with awareness of international standards