6 to 8 years of experience in Information Security, IT Risk Management, GRC, or internal and external audits, Audit-related roles. Strong understanding of IT security policies, regulatory frameworks, and compliance standards. Risk assessment and risk mitigation ,BCP/DR (Business Continuity Planning/Disaster Recovery) concepts , Application Security ,Encryption technologies , SOC (Security Operations Center) processes Bachelors degree in engineering (BE/BTech) Mandatory. CISA (Certified Information Systems Auditor) Highly Preferred. CISSP (Certified Information Systems Security Professional) Advantageous