Information security auditor

1 week ago

Bengaluru, India Muthoot Fincorp Ltd. Full time

ROLE SUMMARY (PURPOSE)


The Information Security Auditor at Muthoot Fincorp Limited (MFL), assesses and evaluates our information systems, data protection protocols, and cybersecurity measures to ensure compliance with regulatory requirements, internal policies, and industry best practices. This role involves identifying vulnerabilities, providing recommendations for security improvements, and helping to safeguard company data and systems from potential security breaches.


KEY RESPONSIBILITIES

Perform regular internal and external audits to assess compliance with security policies, standards, and controls. Review IT infrastructure, applications, networks, and data protection practices.

Identify vulnerabilities and assess risks associated with information systems and recommend corrective actions to reduce risk and improve security.

Prepare detailed audit reports, outlining findings, non-compliance issues, and risk assessments, and present findings to senior management and provide actionable recommendations.

Develop and execute comprehensive internal audit plans to assess the effectiveness of risk management, control, and governance processes within the organization

Evaluate the adequacy of cloud security controls which includes but not limited to access management, data encryption, and incident response procedures.

Conduct audits based on cloud security controls, specifically AWS and OCI.

Provide recommendations, suggestions to improve security posture of the cloud hosted infrastructure.

Ensure ongoing compliance with relevant industry standards (e.g., ISO 27001, DPDPA). Additionally collaborate with teams to maintain compliance with regulatory requirements (e.g., GDPR, HIPAA).

Offer insights and guidance on security policies, access controls, data protection, and risk management strategies.


KEY INTERACTIONS

Internal Stakeholders

External Stakeholders

  1. IT and Cybersecurity Teams: Work closely on implementing recommendations and ensuring secure IT operations.
  2. Compliance Officers: Collaborate to maintain adherence to internal policies and external regulations.
  3. Senior Management: Provide audit findings and suggest improvements to executive leadership.
  4. HR and Legal Departments: Engage for policy alignment and regulatory compliance.
  5. Third-Party Vendors: Conduct security assessments of vendors and ensure they comply with data protection requirements.
  6. Regulatory Authorities: Maintain compliance with relevant industry and government standards.
  7. External Auditors: Coordinate joint assessments or external audits as necessary.

KEY ROLE DIMENSIONS

This is a Pan India Individual Contribution role, which requires continuous communication, mostly with senior leaders, compliance and technology team

KEY SKILLS & BEHAVIOURAL ATTRIBUTES

  1. Proficiency in cybersecurity frameworks, network security, vulnerability management, and information systems auditing.
  2. Strong understanding of risk assessment methodologies and the ability to identify and prioritize vulnerabilities.
  3. Broad knowledge of cloud computing platforms like AWS, Azure and GCP, and various cloud security controls.
  4. Strong understanding of cloud security frameworks and standards, such as CIS Controls, NIST Cybersecurity Framework, and ISO 27001.
  5. Precision in auditing, documentation, and compliance monitoring.
  6. Behavioral Attributes- Driven and in alignment with our Purpose “Transforming the life of the common man by improving their financial well-being” and anchored by our core value of integrity, collaboration, and excellence.

EDUCATION / EXPERIENCE

  1. Minimum Qualification: Bachelor’s degree in information technology, Engineering, Computer Science, Cybersecurity, or a related field. However, a Master’s degree in Cybersecurity, Information Assurance, or a similar discipline is desirable for this role.
  2. Nature of Experience: Minimum of 6 years of experience in internal auditing, with a strong focus on IT audit, security and third-party audits.
  3. Additional Certifications - Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) is mandatory
  4. Certified Information Security Manager (CISM), ISO 27001 Lead Auditor, Certified Ethical Hacker (CEH) are also preferred.

  • Information security auditor

    1 week ago

    Bengaluru, India Muthoot Fincorp Ltd. Full time

    ROLE SUMMARY (PURPOSE)The Information Security Auditor at Muthoot Fincorp Limited (MFL), assesses and evaluates our information systems, data protection protocols, and cybersecurity measures to ensure compliance with regulatory requirements, internal policies, and industry best practices. This role involves identifying vulnerabilities, providing...

  • Information security auditor

    1 week ago

    Bengaluru, India Muthoot Fincorp Ltd. Full time

    ROLE SUMMARY (PURPOSE)The Information Security Auditor at Muthoot Fincorp Limited (MFL), assesses and evaluates our information systems, data protection protocols, and cybersecurity measures to ensure compliance with regulatory requirements, internal policies, and industry best practices. This role involves identifying vulnerabilities, providing...

  • Information security auditor

    1 week ago

    Bengaluru, India Muthoot Fincorp Ltd. Full time

    ROLE SUMMARY (PURPOSE)The Information Security Auditor at Muthoot Fincorp Limited (MFL), assesses and evaluates our information systems, data protection protocols, and cybersecurity measures to ensure compliance with regulatory requirements, internal policies, and industry best practices. This role involves identifying vulnerabilities, providing...

  • Senior Information Security Auditor

    4 weeks ago

    Bengaluru, Karnataka, India DNV Full time

    Job Summary: We are seeking a highly skilled Senior Information Security Auditor to join our team at DNV. As a Senior Information Security Auditor, you will be responsible for performing 3rd-party audits and trainings according to ISO/IEC 27001, ISO 9001, ISO 20000-1, ISO 22301 & other IT specific standards/frameworks.Key Responsibilities:Perform timely and...

  • Senior Information Security Auditor

    3 weeks ago

    Bengaluru, Karnataka, India TERRALOGIC Full time

    Overview:Terralogic is seeking a seasoned Senior Information Security Auditor to join our team of experts in GRC Consulting.Total Experience:5 yearsJob Skills:Proven expertise in IT Security and Infrastructure audits.Ability to conduct ISMS audits independently.Must have audited a minimum of 3 clients and implemented a minimum of 2 clients.Knowledge of...

  • Senior Information Security Auditor

    3 weeks ago

    Bengaluru, Karnataka, India DNV Full time

    Job SummaryWe are seeking an experienced Senior Information Security Auditor to join our team at DNV. The successful candidate will be responsible for performing third-party audits and trainings according to various IT standards and frameworks.Key ResponsibilitiesPerform third-party audits and trainings according to ISO/IEC 27001, ISO 9001, ISO 20000-1, ISO...

  • Senior Information Security Auditor

    1 month ago

    Bengaluru, Karnataka, India DNV Full time

    Job DescriptionDNV is seeking a highly skilled Senior Information Security Auditor to join our team. As a key member of our audit team, you will be responsible for performing 3rd-party audits and trainings according to ISO/IEC 27001, ISO 9001, ISO 20000-1, ISO 22301 & other IT specific standards/frameworks.Key Responsibilities:Perform timely and accurate...

  • Information Technology Auditor

    6 months ago

    Bengaluru, Karnataka, India INTEL Full time

    Evaluates risks and controls for software development, service operation, IT infrastructure, cyber security, information security, and related processes. Develops draft audit reports by identifying and gathering support for potential issues and recommending solutions. Contributes to planning, scope development, and project execution for sophisticated...

  • Security Auditor

    2 weeks ago

    Bengaluru, Karnataka, India Crossbow Labs Full time

    Job Title: Security AuditorAbout the Role: We are seeking a skilled Security Auditor to join our team at Crossbow Labs. As a Security Auditor, you will be responsible for conducting IT security and infrastructure audits, as well as developing and maintaining audit checklists and documents.Responsibilities:Conduct IT security and infrastructure auditsDevelop...

  • Information Technology Auditor

    4 weeks ago

    Bengaluru, Karnataka, India INTEL Full time

    Internal Audit is chartered by the Audit and Finance Committee of Intel's Board of Directors to provide the Board and management with independent, objective assurance and advisory services. We advise and assist Intel in the wholistic oversight of enterprise risk management and propel Intel's risk management culture to help Intel achieve its purpose. Our work...

  • Senior Information Systems Auditor

    3 weeks ago

    Bengaluru, Karnataka, India PVH Full time

    Job Summary: PVH is seeking a highly skilled Senior Information Systems Auditor to join our Internal Audit team. Key Responsibilities: Evaluate technology and process controls within the Company's IT environment, including hardware, software, telecommunications, security, and system development and implementation methodology. Assist the IS Audit Manager...

  • Senior Information Systems Auditor

    6 months ago

    Bengaluru, India PVH Full time

    Design Your Future at PVH Senior Information Systems Auditor POSITION SUMMARY: Are you an experienced Information Systems Auditor who likes to evaluate security and controls in current and emerging technology? Do you have a strong understanding of hardware/software and communication platforms (i.e., Linux, SAP HANA, SAP GRC, Azure,...

  • Quality Risk Security Auditor

    3 weeks ago

    Jayanagar, Bengaluru, Karnataka, India Suparnas Management Consulting Pvt. Ltd. Full time

    **Role Description** This is a full-time on-site role for an ISO Lead Security Auditor. The ISO Lead Security Auditor will be responsible for conducting IT audits, ensuring network and cybersecurity, managing information security systems, and implementing measures to safeguard data and infrastructure. Additionally, the ISO Lead Security Auditor will be...

  • ITGC SOX Auditor

    3 weeks ago

    Bengaluru, Karnataka, India 3M Full time

    SOX Compliance Specialist - IT General Controls ExpertAt 3M, we value innovation and creativity, and we're looking for a talented SOX Compliance Specialist to join our team.Lead walkthroughs and test of design and operational effectiveness of IT general controls with our external auditor.Coordinate and perform SOX program testing/auditing of IT General...

  • Information Technology Auditor

    4 weeks ago

    Bengaluru, India VIBRANT STAFFING SOLUTIONS PVT LTD Full time

    Profile- Information Technology AuditorExperience- 10 yearBudget- openLocation- Bangalore/MumbaiRoles and Responsibilities :- Looking for an IT Auditor with technical background for designing / execution of Non-functional test controls on various Apps and Infra prior to them going live into production. Technical resource having any of ISACA or ISC...

  • Senior Information Systems Auditor

    1 month ago

    Bengaluru, Karnataka, India PVH Full time

    Design Your Future at PVHPosition Summary:PVH is seeking an experienced Information Systems Auditor to join our global Internal Audit team. As a key member of our team, you will be responsible for evaluating technology and process controls within our information Technology (IT) environment.Key Responsibilities:Evaluate technology and process controls within...

  • Information Technology Auditor

    2 days ago

    Bengaluru, Karnataka, India Northern Trust Corp. Full time

    About Northern Trust: Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889. Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring...

  • Internal Security Auditor and Dpo

    5 months ago

    Bengaluru, Karnataka, India Intellimind Services India Pvt. Ltd. Full time

    **Job Title: INTERNAL SECURITY AUDITOR AND DPO** **Experience level: 3-4 years.** **Location: Bangalore** **Job type: Full-time** **About us** Our company is a world-wide leader in B2B Credit Management solutions. We believe better information leads to better business decisions. Our cloud-based platform delivers a suite of products and services that...

  • IT Security Auditor

    4 weeks ago

    Bengaluru, Karnataka, India VIBRANT STAFFING SOLUTIONS PVT LTD Full time

    Looking for a skilled IT Security Auditor to join our team at VIBRANT STAFFING SOLUTIONS PVT LTD. The ideal candidate will have a technical background and experience in designing and executing non-functional test controls on various applications and infrastructure.Responsibilities:Design and execute non-functional test controls on various applications and...

  • Senior IT Auditor

    6 months ago

    Bengaluru, India Northern Trust Corporation Full time

    About Northern Trust: Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889. Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our...