Technical Auditor (Information Security) - Internal Audit Team

Role & responsibilities -

• Basic understanding of ISO/ 27001:2022 Information Security Management System (ISMS).
• Working knowledge of PCI DSS v4.0 requirements
• Basic understanding of SOC 2 Type II
• Knowledge of internal audit principles, audit lifecycle, evidence collection, and documentation.
• Ability to review policies, procedures, configurations, and operational processes against control requirements.
• Strong analytical and problem-solving skills with attention to detail.
• Good report writing and documentation skills.
• Proficiency in Microsoft Office (Excel, Word, PowerPoint).

Preferred Technical Knowledge -

Basic understanding of:

• Network Security
• Firewalls
• Active Directory / Identity & Access Management
• Windows/Linux environments
• Cloud platforms (AWS/Azure preferred)
• Endpoint Security / Antivirus / EDR
• Vulnerability Assessment & Patch Management
• Backup & Disaster Recovery
• Log Monitoring and SIEM concepts

Preferred Qualifications -

• Bachelors degree in computer science or B.Tech, Information Technology, Cyber Security, or related field.
• 1 to 3 years of experience in Information Security, IT Audit, Internal Audit, Compliance, or Risk Management.
• Relevant certifications (preferred but not mandatory):
• ISO/IEC 27001 Internal Auditor
• ISO/IEC 27001 Lead Auditor (added advantage)

Key Competencies -

• Excellent communication skills.
• Conducting MRM
• Strong documentation and report-writing ability.
• Ability to work independently and within timelines.
• High level of integrity and confidentiality.
• Eagerness to learn new compliance frameworks and technologies.