Cyber Audit Specialist - ITGC & Cyber Security Audit

Responsibilities

• Understand audit scope, define audit objectives, and develop audit plans and audit programs
• Perform Cyber Security Audits, IT Audits, and ITGC Audits in line with industry standards and regulatory requirements
• Execute regulatory audits such as RBI, SEBI, and IRDAI Cyber Security / IT Audits
• Conduct SOX ITGC testing, PCI DSS assessments, and SOC 1 / SOC 2 audits
• Review and evaluate IT security governance, IT policies, and IT control frameworks
• Assess access management, change management, IT operations, database, network, and data center controls
• Identify risks and evaluate the design and effectiveness of IT controls
• Execute audit test procedures, review and analyse audit evidence, and document observations
• Compare client processes with industry best practices and standards such as ISO 27001, COBIT, COSO, and NIST
• Identify control gaps and provide practical, risk-based recommendations for remediation
• Prepare high-quality audit reports and client presentations
• Provide timely status updates and final deliverables to clients
• Act as a client-facing point of contact, coordinating with client stakeholders and senior management
• Manage multiple audit assignments simultaneously and ensure timely completion
• Lead and mentor junior team members, review their work, and support their technical development
• Develop and maintain audit checklists, procedures, and audit documentation
• Stay updated on emerging technologies, cyber risks, and regulatory requirements
• Collaborate with internal teams and leadership for successful project delivery
• Travel to client locations as required for audit assignments

Skills Required

• Experience: 2-10 years in Cyber Audit / IT Audit / ITGC Audit
• Educational Qualification:
• B.Sc. IT / MCA / B.Tech / B.E. (CS/IT/Cyber Security)
• CA / DISA - Added advantage
• Required Knowledge & Skills:
• Strong experience in Cyber Audit, IT Audit & ITGC Audit
• Exposure to SEBI, RBI & IRDAI Audits
• Knowledge of SOX, PCI DSS, SOC 1 & SOC 2
• Familiarity with ISO 27001, COBIT, COSO & NIST
• Understanding of Access Controls, Change Management, IT Operations, Network Security, Databases, Applications & Data Center Controls
• Experience in Risk Assessment & Control Evaluation
• Strong client handling, communication & report-writing skills
• Team handling & project management experience for senior roles
• Preferred Certifications:
• CISA / DISA / CISM / CISSP
• ISO 27001 Lead Auditor / Implementer
• Preferred Tools:
• MS Excel, ACL, IDEA, Tableau & other data analytics tools
• Key Competencies:
• Client & stakeholder management
• Analytical & problem-solving skills
• Ability to manage multiple projects & deadlines
• Leadership & team mentoring
• Strong presentation & report-writing skills