GM - IT Audit
PaytmPayments company
Noida, IndiaDirector
Sapphire Ventures
SoftBank
Ant Financial
Alibaba Group
Elevation Capital
Berkshire Hathaway
Leadership & General Management
About the role
TL;DR
Lead IT and cloud security audits, ensuring compliance and enhancing security policies.
- •We are seeking an experienced and detail-oriented Information Security and Cloud Security Auditor to join our team.
- •The ideal candidate will have 3-7 years of expertise in data security and privacy control implementation, internal auditing, third-party risk management, cybersecurity governance, and cloud security (banking sector preferred).
- •Key Responsibilities Conduct IT and cloud security audits across various domains, including IT General Controls (ITGC), Information Security Controls, Cloud Security, Network Security, Vulnerability Management, and Vendor Risk Assessments.
- •Assess compliance with relevant laws, regulations, industry standards, and organizational policies across both on-premises and cloud environments.
- •Develop and enhance information security and cloud security policies and procedures in alignment with industry best practices.
- •Maintain thorough documentation of audit findings, risk assessments, security measures, working papers, audit program checklists, and evidence for internal and external reporting.
- •Validate ITGC, cloud security, and application-specific controls and manage audit documentation, risk assessments, evidence gathering, and control testing.
- •Requirements Minimum 10 years of experience in Information Security and Auditing, with a strong background in Cloud Security and the Banking and IT industries.
- •Proven experience in conducting IT and cloud security audits, validating ITGC and cloud application controls, and maintaining comprehensive audit documentation.
- •Hands-on experience in vulnerability management, risk management, physical security, identity and access management, encryption, secure development, incident management, security infrastructure, and security policies across on-premises and cloud environments.
- •Strong expertise in third-party risk management, regulatory compliance, and management of IT audit findings across traditional and cloud-based environments.
- •Strong analytical and problem-solving skills with excellent communication, stakeholder management, and documentation abilities.
Required skills
Risk ManagementCompliance ManagementAWSAzureGoogle CloudOWASP
Domain expertise
cybersecurityfintech
Tech stack
AWSAzureGoogle CloudOWASP