Cybersecurity Auditor
2 weeks ago
Why do we need this role? The purpose of this role is to:
o Deliver the Cybersecurity audits, assist in the identification of Risks and to test key controls related to Cybersecurity risks. o Support the planning, execution and reporting of a small simultaneous portfolio of Audit activity as set out in the Audit Charter and the annual Audit Plan. o Define and develop appropriate Cybersecurity audit capability within clients Internal Audit team and contribute to Audit's Annual and Dynamic planning process. This role sits within Internal Audit (IA). IA is the Third line of defence in ensuring the effectiveness of the organisation's controls in detecting, preventing and correcting risk. Key tasks; accountabilities and challenges of this role Key responsibilities and accountabilities for the role are as follows: · Behave in line with clients values. · Manage a team of three Direct Report and provide timely feedback and coaching to colleagues to promote a performance and development culture. · Lead and deliver a small portfolio of concurrent audits (2-3) within agreed resource and time budgets. · Plan and deliver audits covering but not limited to Security incident detection, Security incident response, Security monitoring, Threat intelligence, Protective technologies, etc. · Efficient verification of audit raised issues within internal SLA targets once the business indicate issues are complete, supported by quality workpapers. · Plan and project manage delivery of audits within agreed resource and time budgets. Contribute to Annual and Dynamic Planning as directed · Provide strategic guidance to audit team leads on scope and approach. Experience · Experience within Audit or Risk Management / Assurance. · Information security experience in any one of the areas including Security operations, Offensive security, Defensive security, Security architecture or Security engineering. · Experience working with Crowdstrike, Splunk, Qualys, Defender ATP, Proxy, Endpoint Detection & Response tools, SIEM and Mail Gateways. · Scripting language understanding is a must (Python, Bash, Powershell, etc.)
· Familiarity with the MITRE Attack framework. Understanding of security vulnerabilities, attacker exploit techniques, and methods for their remediation. · Experience with common security monitoring, log analysis and forensic tools. · Understanding of best practices in security engineering, including secure development, cryptography, network security, security operations, systems security, policy, and incident response. Essential capabilities · A deep understanding of Cybersecurity risks and controls. Subject matter expertise in at least one area of Security such as Defensive security, Offensive security, Security architecture or Security engineering. · Ability to build strong working relationships with internal and business stakeholders across different levels of the organisation · Flexible and comfortable working in an agile, fast and constantly changing environment. · Ability to understand key Technical controls and processes across the end to end value chain. · Proven expertise in people leadership. Qualification Requirements · Degree or tertiary education in technology or related field is required. · Industry recognised Security certifications such as CISSP, OSCP, GCFE, GCFA, GCIH, GNFA etc. are highly preferred
-
Cybersecurity Expert
7 days ago
Gurgaon, Haryana, India Cubastion Consulting Full time ₹ 12,00,000 - ₹ 36,00,000 per yearEXPERIENCE10+ yearsROLES & RESPONSIBILITIES• Ensure end-to-end security of applications, data, and infrastructure across web and serverenvironments.• Maintain and enforce robust access control mechanisms, authentication protocols, and secureconfiguration baselines.• Conduct and coordinate regular security audits and ensure adherence to applicable...
-
Senior Auditor
2 weeks ago
Gurgaon, Haryana, India RBS Full time ₹ 12,00,000 - ₹ 36,00,000 per yearJoin us as a Senior AuditorJoin us in Technology and contribute to independent audit engagement assurance by undertaking allocated tasks within the engagement life cycleYou'll be providing quality and effective assurance as well as influencing our business managers to improve control, specialising in TechnologyThis is also an opportunity to hone your skills...
-
Gurgaon, Haryana, India Max Healthcare Full time ₹ 12,00,000 - ₹ 36,00,000 per yearRole & responsibilities:Governance & ComplianceOngoing management of ISO/IEC 27001:2022, SOC 2 Type I/II, and other security frameworks.Coordinate and support internal/external ITGC audits and ensure timely closure of observations with evidence.Design and maintain ISMS scope, policies, procedures, and SOA documentation aligned with regulatory and business...
-
Director- GRC Cybersecurity
2 weeks ago
Gurgaon, Haryana, India R1 RCM Full time ₹ 12,00,000 - ₹ 36,00,000 per yearR1 is the leading provider of technology-driven solutions that transform the patient experience and financial performance of hospitals, health systems and medical groups. We are the one company that combines the deep expertise of a global workforce of revenue cycle professionals with the industry's most advanced technology platform, encompassing...
-
Vice President Cybersecurity
1 day ago
Gurgaon, Haryana, India Fluidech Full timeTitle:Vice President – Cybersecurity (IT Systems)Location:Onsite – Gurugram, Haryana, IndiaDuration:Full-Time RoleCompany: Fluidech IT Services Private LimitedCompany Overview:FLUIDECH, an ESCONET group company and a deemed public company, is a technology consulting and managed services firm specialising in cybersecurity.Founded in 2014 and headquartered...
-
Information Security Manager
2 weeks ago
Gurgaon, Haryana, India questW Full time ₹ 12,00,000 - ₹ 36,00,000 per yearThis is a full time role with our global client for their captive finance arm in Gurgaon.Key objective-The position will be responsible for ensuring regulatory compliance under RBI guidelines for NBFCs, managing internal policies, and driving the information security framework (data protection, IT audits, and cyber risk governance). The role ensures that...
-
Senior GRC Consultants
2 weeks ago
Gurgaon, Haryana, India 6e23ab23-669a-4645-8504-b79717494e00 Full time ₹ 10,00,000 - ₹ 25,00,000 per yearCompany DescriptioniSecServ partners with enterprises across banking, manufacturing, and critical infrastructure sectors to enhance security and ensure compliance while optimizing costs. With decades of expertise, their Principal Consultants specialize in information security frameworks, data privacy, business continuity, and regulatory compliance....
-
GRC Consultant
2 weeks ago
Gurgaon, Haryana, India eSec Forte® Technologies Full time ₹ 25,00,000 - ₹ 50,00,000 per yearRole DescriptionThis is a full-time, on-site role for a GRC Consultant based in Bengaluru. The GRC Consultant will be responsible for ensuring governance, risk management, and compliance activities for clients. Daily tasks include conducting risk assessments, compliance audits, and policy reviews, implementing security controls, developing reports, and...
-
IT Security Governance, Risk, and Compliance
2 weeks ago
Gurgaon, Haryana, India Crocs Vietnam Full time ₹ 10,00,000 - ₹ 2,50,00,000 per yearRequisition ID: 9911Job Location(s):Gurugram, HR, IN, 122022Time in Office: HybridOverviewReporting into Information Security, the Governance, Risk, and Compliance (GRC) Engineer plays an instrumental role in guiding GRC strategies and processes. As the primary GRC authority in India and supporting the global GRC team, this engineer works directly with other...
-
Technology Internal Audit Director
2 weeks ago
Gurgaon, Haryana, India FNZ Full time ₹ 12,00,000 - ₹ 24,00,000 per yearJob TitleInternal Audit Director - TechnologyLocationGurugramReports toGroup Head of Internal AuditRole DescriptionA senior leadership position in the global Internal Audit team, the Internal Audit Director for Technology is responsible for driving the company's technology-focused internal audit strategy, encompassing IT systems, applications, data, and...