Information Security Auditor

Information Security Auditor

ASSA ABLOY Global Solutions is strengthening its internal security assurance capability to support global business operations. This role focuses on conducting information security audits, assessing control effectiveness, and supporting compliance with key standards such as ISO/IEC 27001:2022 and regulatory requirements including NIS2.

Primary Job Purpose

The Security Auditor is responsible for leading and executing information security audits across systems, infrastructure, business processes, and third-party services. The role aims to strengthen internal audit capability, improve control effectiveness, and ensure compliance with internal and external security requirements in a global environment.

Key Position Accountabilities

• Conduct internal information security audits across business applications, infrastructure, and operational processes.
• Assess control design and operating effectiveness, identifying gaps and opportunities for improvement.
• Prepare audit reports, executive summaries, findings, and actionable recommendations.
• Perform third-party and supplier security audits.
• Support ISO/IEC 27001:2022 internal audits and external audit readiness activities.
• Assess compliance with frameworks including ISO 27001, ISO 27002 and NIS2.
• Track audit findings and support remediation and closure.
• Contribute to risk assessments and risk registers.
• Review security documentation and control evidence.
• Identify control gaps and suggest remediation.
• Improve audit frameworks and methodologies.

Selection Criteria

Essential:

• 5-7 years of experience in information security, IT audit, or compliance.
• ISO/IEC 27001:2022 Lead Auditor certification.
• Strong knowledge of ISO frameworks and risk/control standards.
• Experience in audit execution and reporting.
• Experience in third-party risk and supplier security.
• Strong analytical and communication skills.

Preferred:

• Certifications such as CISA, CISSP, CISM or CRISC.
• Experience with NIS2 or similar regulations.
• Experience in global environments.
• Knowledge of cloud security and IAM.

Work Environment Factors

• Hybrid model.
• Global exposure across business units.
• Limited travel may be required.

Location

Chennai, IN

Experience Level

Mid-senior level

Disclaimer: This job description has been sourced from a public domain and may have been modified by Naukri.com to improve clarity for our users. We encourage job seekers to verify all details directly with the employer via their official channels before applying.