IS Audit

Key Responsibilities:

• Review and technically validate VAPT reports from internal/external security teams.
• Conduct independent VAPT Process Audit to confirm vulnerability closure and remediation effectiveness.
• Map findings to global frameworks including MITRE ATT&CK, CIS Top 18 Controls, OWASP Top 10, CVE, and CWE Top 25.
• Ensure compliance with regulatory guidelines such as the RBI Cyber Security Framework (CSF), IT Governance, Risk & Controls (ITGRC), IT Outsourcing, and Digital Payment Security Controls (DPSC) circulars.
• Document audit evidence, remediation logs, and prepare vulnerability trend reports.
• Coordinate with Information Security, Risk, and IT Operations teams to monitor closure of findings.
• Recommend enhancements to strengthen the organizations overall cybersecurity posture