Information Security Auditor

1 day ago

Gurgaon, Haryana, India Maruti Suzuki Full time ₹ 15,00,000 - ₹ 25,00,000 per year

Job Description cum Position Title: Information Security Auditor (Deputy Manager/Assistant Manager) About the Role We are seeking a detail-oriented and proactive Information Security Auditor to join our team. The role involves conducting information security audits and related activities for internal & external stakeholders, including vendors, dealers, and technology partners. It also encompasses activities to ensure organization's compliance with information security standards, conducting internal audits, and supporting the ISO 27001 recertification process. The ideal candidate will play a crucial role in ensuring compliance with information security standards, identifying risks, and recommending actionable improvements.

Key Responsibilities
• Information Security Audits:
• Plan, execute, and document information security audits within company across all verticals and for external stakeholders, including vendors, dealers, and technology partners.
• Assess compliance with relevant information security policies, standards, and frameworks (e.g., ISO 27001, NCRF, NIST, GDPR, JAMA-JAPIA Guidelines etc.).
• ISO 27001 Compliance and Recertification:
• Lead and coordinate the company's ISO 27001 recertification audit process with third-party auditors.
• Ensure compliance with ISO 27001 standards and maintain required documentation.

  • Collaborate with internal stakeholders to address audit findings and implement corrective actions.
    • Risk Assessment and Mitigation:
    • Evaluate third-party risks and recommend practical measures to mitigate identified risks.
    • Collaborate with stakeholders to ensure the implementation of corrective actions and improvements.
    • Policy and Compliance Monitoring:
    • Ensure that stakeholders adhere to organizational information security policies and regulatory requirements.
  • Assist in the development, review, and improvement of information security policies, procedures, and guidelines.
    • Stakeholder Engagement:
    • Serve as the primary point of contact for external stakeholders during audits.
    • Communicate audit findings and recommendations effectively through detailed reports and presentations.
    • Continuous Improvement:
    • Stay updated on emerging information security threats, technologies, and industry trends.
  • Contribute to the enhancement of the organization's information security framework and processes. Qualifications and Skills Education:
    • Bachelor's degree in information technology, Computer Science, Cybersecurity, or a related field. Work Experience:
    • 3–5 years of experience in information security auditing, IT risk management, or a related field.
    • Hands-on experience with third-party/vendor audits is highly desirable.

Certifications (Preferred):
• ISO 27001 Lead Auditor/Implementer
• CISSP (Certified Information Systems Security Professional) / CISA (Certified Information Systems Auditor) / CRISC (Certified in Risk and Information Systems Control) or similar Technical Skills:
• Strong knowledge of information security frameworks and standards (e.g., ISO 27001, NCRF etc.).
• Familiarity with IT systems, networks, and security controls.
• Proficiency in using auditing tools and techniques. Soft Skills:
• Excellent communication and interpersonal skills to interact with external stakeholders.

  • Strong analytical and problem-solving abilities.
    • Attention to detail and ability to work independently.
    • Strong organizational and time management skills.

  • Information Security

    2 weeks ago

    Gurgaon, Haryana, India MapMyBusiness Full time ₹ 9,00,000 - ₹ 12,00,000 per year

    Job Title: Information Security & Data Protection Officer (DPO) – ManagerLocation: Gurugram / OnsiteExperience: 6–7 yearsDuration - 6 monthEmployment Type: Full-TimeBudget - 1.4LPMAbout the RoleWe are seeking a highly skilled and motivated InfoSec/DPO Manager to lead our organization's information security, data protection, and compliance initiatives....

  • Sr. Information Security

    1 week ago

    Gurgaon, Haryana, India ALIQAN Technologies Full time ₹ 12,00,000 - ₹ 25,00,000 per year

    Job Title: Information Security & Data Protection Officer (DPO) – ManagerLocation: GurgaonExperience: 6–7 yearsEmployment Type: 6 months contract + extAbout the RoleWe are seeking a highly skilled and motivated InfoSec/DPO Manager to lead our organization's information security, data protection, and compliance initiatives. The ideal candidate will...

  • Chief Information Security Officer

    3 days ago

    Gurgaon, Haryana, India gHRig People Solutions Full time ₹ 15,00,000 - ₹ 30,00,000 per year

    Position Title: Chief Information Security Officer (CISO)Location: GurugramReports To: CEO /CTOEmployment Type: Full-TimeExperience: 10–15 years, with minimum 5 years in NBFC/financial servicesPosition SummaryThe Chief Information Security Officer (CISO) is a CXO-level executive responsible for establishing and leading the organization's information...

  • Manager- Information Security

    1 week ago

    Gurgaon, Haryana, India Glan Solutions Full time ₹ 15,00,000 - ₹ 25,00,000 per year

    Must have ISO 27001 Lead Implementer/Auditor and ISO 27701 Lead Implementer/Auditor certificationsunderstanding of IT Act, DPDPA, Cert In regulations, CIS Controls as well as UK DPA and ISO 31000email: etalenthire@ satishL: 88O

  • Senior Auditor

    1 week ago

    Gurgaon, Haryana, India NatWest Group Full time ₹ 6,00,000 - ₹ 18,00,000 per year

    Senior Auditor - Technology, AVP Join us as a Senior AuditorJoin us in Technology and contribute to independent audit engagement assurance by undertaking allocated tasks within the engagement life cycle You'll be providing quality and effective assurance as well as influencing our business managers to improve control, specialising in Technology This...

  • Senior Auditor

    3 days ago

    Gurgaon, Haryana, India RBS Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Join us as a Senior AuditorJoin us in Technology and contribute to independent audit engagement assurance by undertaking allocated tasks within the engagement life cycleYou'll be providing quality and effective assurance as well as influencing our business managers to improve control, specialising in TechnologyThis is also an opportunity to hone your skills...

  • Information Security Analyst

    3 days ago

    Gurgaon, Haryana, India Danaher Full time ₹ 6,00,000 - ₹ 18,00,000 per year

    At Cepheid, we are passionate about improving health care through fast, accurate diagnostic testing. Our mission drives us, every moment of every day, as we develop scalable, groundbreaking solutions to solve the world's most complex health challenges. Our associates are involved in every stage of molecular diagnostics, from ideation to development and...

  • Information Security Architect

    1 day ago

    Gurgaon, Haryana, India Cepheid Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    At Cepheid, we are passionate about improving health care through fast, accurate diagnostic testing. Our mission drives us, every moment of every day, as we develop scalable, groundbreaking solutions to solve the world's most complex health challenges. Our associates are involved in every stage of molecular diagnostics, from ideation to development and...

  • Information Security Engineer

    1 week ago

    Gurgaon, Haryana, India EDGE Executive Search Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Our client is a global company in the fintech sector andwork in the area of derivatives and OTC products, which are the most complex parts of the financial market. They are the  market leader in derivatives post-trade processing, bringing innovation, expertise, processes and networks together to solve the post-trade challenges of global financial...

  • Information Security Engineer

    1 week ago

    Gurgaon, Haryana, India Growth Catalyst Group of Companies - Advatix | XPDEL | Archway Full time ₹ 10,00,000 - ₹ 25,00,000 per year

    Position Name - Security & IT-GRC AnalystSummary - Individual will primarily be responsible to research, evaluate, design, configure, implement, maintain and monitor the security systems and product solutions and triage security incidents related to such platforms. The role will also be responsible for general security administration duties including O365...