Execute a portfolio of IT and cybersecurity audits, focusing on audits related to IT general controls, Regulatory Audits, ISO Audits, Soc2 Audits, Internal Audits & Gap Assessments, Due Diligence Audits, etc.
Collaborate with various department leads, CISO, CTO & CRO to build an audit pipeline, addressing emerging risks and identifying areas for process improvement.
Lead the development of audit programs and methodologies, ensuring alignment with industry best practices and regulatory frameworks (e. g., NIST, COBIT, ISO, ITGC).
Present audit findings to senior management, communicating risks, recommendations, and opportunities for improvement.
Leading Cyber Security Awareness program end-to-end.
Requirements :
7+ years of experience in IT audits, Regulatory & Compliance Audits, Cyber Security Audits, ISO, SoC2 Audits.
Certifications such as CISSP, CISA, CISM, OSCP, OSWP, CRTP, CEH, etc., are preferred.
Strong leadership, project management, and communication skills with all the stakeholders at all levels.
Should be able to convince and convey the security perspectives behind each control of the Audits.
Good Stakeholder Management skills.
Should be flexible towards any additional responsibilities in the field of Cyber Security,