Lead Auditor and Implementer

Educational Qualification

Essential: BE /BTech/ BSc IT/MCA

Desirable: 5 to 8 Years of prior experience in Audit and compliance.

Business/ Technical Skills Sets

Essential:

• Professional certification such as ISO 27001:2022 Lead Auditor and Implementer.
• Minimum of 5 years of experience in ISMS, ITGC, and GITC audits.
• In-depth knowledge of ISO 27001, Cybersecurity Framework, and other relevant standards.
• Strong understanding of IT infrastructure, network security, and information security best practices.
• Excellent analytical and problem-solving skills with attention to detail.
• Effective communication skills to present findings and interact with stakeholders at all levels.
• Ability to work independently and manage multiple priorities in a dynamic environment.
• ISO 27001:2022 Lead Auditor / Implementer certified

Desirable:

• Financial domain would be an added advantage.
• ISO 20000 Certified Lead Auditor / Implementer
• ISO 22301 (BCMS) Lead auditor / Implementer
• CMMi Associate Certified

Job Profile

• Conduct audits of Information Security Management Systems (ISMS) to assess the effectiveness of controls and compliance with ISO 27001 standards.
• Evaluate IT General Controls (ITGC) including logical access controls, change management, and backup procedures to ensure they are operating effectively.
• Review General IT Controls (GITC) such as change management, and computer operations procedures.
• Identify and assess risks related to information security and IT governance, and recommend corrective actions and improvements.
• Monitoring tracking of audit recommendations and management responses.
• Stay current with industry trends, emerging risks, and best practices in information security and IT governance.
• Provide guidance and support to stakeholders on audit-related matters.
• Flexible hours may be necessary to accommodate audit schedules and deadlines.