ReBIT - Senior Auditor/Lead - Cyber Security (5-8 yrs)

Job Description :

We are seeking a highly skilled Senior Auditor/Lead Auditor with expertise in Cyber Security to join our team.

The ideal candidate will be responsible for conducting audits, assessing security risks, and ensuring compliance with industry standards and regulations.

This role requires strong analytical skills, attention to detail, and the ability to provide recommendations for enhancing security controls.

Key Responsibilities :

- Plan, conduct, and lead cyber security audits to assess risks and vulnerabilities.

- Evaluate security policies, procedures, and controls to ensure compliance with industry standards such as ISO 27001, NIST, CIS, GDPR, SOC 2, and PCI-DSS.

- Identify security gaps and provide actionable recommendations for risk mitigation.

- Review and assess network security, cloud security, application security, and endpoint security.

- Perform risk assessments and threat analysis to improve overall security posture.

- Collaborate with IT and security teams to ensure implementation of best practices.

- Develop and maintain audit reports, findings, and recommendations for senior management.

- Monitor compliance with regulatory frameworks and organizational security policies.

- Stay updated on emerging cyber threats, vulnerabilities, and security trends.

- Assist in security incident investigations and forensic analysis as needed.

Skills & Qualifications :

- Bachelor's degree in Information Security, Computer Science, or related field.

- Certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, CEH are highly preferred.

- Strong understanding of cyber security frameworks, risk management, and compliance.

- Experience in conducting IT security audits, risk assessments, and security reviews.

- Proficiency in network security, cloud security (AWS, Azure), encryption, and IAM.

- Hands-on experience with security tools such as SIEM, vulnerability scanners, firewalls, and endpoint protection.

- Strong analytical, problem-solving, and report writing skills.

- Ability to work independently and communicate effectively with technical and non-technical stakeholders.

- This role is ideal for professionals seeking to make a significant impact in cyber security auditing and risk management within a dynamic and evolving security landscape.