Manager- IT Auditor

Job Purpose

Lead and execute risk-based IT and cybersecurity audits across the organization to assess governance, security controls, IT processes, and regulatory compliance. Provide actionable recommendations to strengthen the organization's security posture and risk management.

Key Responsibilities

• Plan and execute end-to-end IT, cybersecurity, and information security audits.
• Assess IT governance, cyber risk management, and security frameworks.
• Review the design and effectiveness of controls across:
  • Identity & Access Management (IAM)
  • Network, Endpoint, Cloud & Application Security
  • Data Protection
  • Patch & Vulnerability Management
  • Change Management
  • Logging, Monitoring & Incident Management
  • Backup & Recovery
  • Configuration, Asset & Physical Security
• Perform IT General Controls (ITGC) reviews and third-party/vendor security assessments.
• Evaluate compliance with standards such as ISO 27001, NIST, COBIT, SOX/ICFR, GDPR, DPDP, and CERT-In.
• Identify high-risk areas, validate remediation, and monitor audit findings to closure.
• Prepare audit reports and present key findings to senior management and Audit Committees.
• Support continuous monitoring, analytics, and capability building for internal audit teams.

Qualifications

• B.Tech (IT/CS) with MBA or Master's in Cyber Security, Information Security, Computer Science, or related field.
• Preferred certifications: CISA, CISSP, CISM, CRISC.
• 8+ years of experience in IT Audit, Cybersecurity, ISMS, Technology Risk, or Risk Assurance.
• Strong knowledge of ISO 27001, IAM, SOC, ITGC, cloud security, and enterprise technology environments.