Job opening - Information Security Auditor & Cyber Security Auditor

Cyber Security Audits

• Execute risk-based cyber security audits covering on-premise and cloud environments.
• Assess security controls across network, endpoint, application, database, cloud, and infrastructure domains.
• Evaluate the effectiveness of security monitoring, SOC operations, threat detection, and incident response processes.
• Conduct thematic reviews on emerging cyber risks and security technologies.

Technology & Information Security Reviews

• Review Identity & Access Management (IAM), Privileged Access Management (PAM), MFA, and user access governance controls.
• Assess Vulnerability Management, Patch Management and Security Configuration Management.
• Evaluate Data Security and Data Protection controls, including encryption, key management, DLP, and data classification.
• Review application security controls, secure SDLC, DevSecOps, API security, and cloud security implementations.

Regulatory & Compliance Assessment

• Assess compliance with RBI, SEBI, NPCI, NCIIPC, CERT-In, and other applicable regulatory requirements.
• Evaluate adherence to the Bank's Information Security Policies, Technology Standards, and Cyber Security Frameworks.
• Support regulatory inspections and external audits by providing audit observations and management responses.

Audit Execution

• Perform planning, risk assessment, fieldwork, testing, reporting, and follow-up activities.
• Review system configurations, security logs, policies, procedures, and operational evidence.
• Conduct walkthroughs with business, technology, and information security teams.
• Prepare concise and impactful audit reports for senior management and Audit Committee review.

Data Analytics & Automation

• Leverage data analytics, AI tools, and automation techniques to enhance audit effectiveness.
• Perform log analysis, security event reviews, and risk trend analysis.

Stakeholder Management

• Engage with Technology, Information Security, Digital Banking, Cloud, Infrastructure, and Business teams.
• Present audit observations and recommendations to senior management.
• Track remediation of audit findings and validate closure evidence.

Technical Knowledge

• Cyber Security Architecture, Network Security, Cloud Security (AWS, Azure, GCP), IAM / PAM, SIEM / SOC Operations, Endpoint Security, Encryption & Cryptography, Vulnerability Assessment & Penetration Testing, Database Security and Data Protection & Privacy Controls

Regulatory & Framework Knowledge

• RBI Cyber Security Guidelines, RBI IT Governance Directions, SEBI CSCRF, NPCI Security Requirements, CERT-In Directions, ISO 27001, NIST Cyber Security Framework, CIS Controls. OWASP

Preferred Certifications

• CISA. CISSP, CISM, CRISC, CEH, CCSP, AWS/Azure Security Certifications, CCNA, CCNP