GRC Auditor

Key Responsibilities:

• Conduct information security audits and gap assessments against ISO 27001, ISO 27701, ISO 22301, NIST CSF, COBIT, PCI DSS, and CIS Controls.
• Assess regulatory compliance with RBI, SEBI CSCRF, IRDAI, UIDAI, CERT-In, and other applicable guidelines.
• Perform IT risk assessments, security control testing, and third-party/vendor risk assessments.
• Develop and review security policies, procedures, risk registers, and compliance documentation.
• Prepare audit reports, identify security gaps, and recommend corrective actions.
• Coordinate with clients and support regulatory inspections and external audits.

Qualifications & Skills:

• An engineering degree in IT, Computer Science, Cybersecurity, or a related discipline is preferred.
• ISO 27001:2022 Lead Auditor certification.
• Knowledge of information security frameworks, DPDP Act, GDPR, and cybersecurity regulations.
• Certifications such as CISA, CISM, CRISC, CEH, ISO 27701 LA, or ISO 22301 LA.
• Strong analytical, documentation, communication, and client-handling skills.