General Manager - IS Audit

Position Title:

1. Position Overview

Senior Information Security Auditor

2. Educational Qualifications

Essential:

• B.E / B.Tech in any of the following (or equivalent):
  
• Computer Science
  
• Computer Science & Engineering
  
• Information Technology
  
• Information Security
  
• Electronics
  
• Electronics & Communications Engineering
  
• Software Engineering
  

OR

• MCA / M.Tech / M.Sc. in:
  
• Computer Science
  
• Computer Science & Engineering
  
• Information Technology
  
• Information Security
  
• Electronics
  
• Electronics & Communication Engineering
  

All qualifications must be obtained from a University/Institution/Board recognized by the Government of India or approved by Government Regulatory Bodies.

3. Other Certifications

Essential:

• CISA (Certified Information Systems Auditor)

  Issued by

  ISACA, USA

• Certificate must be

  valid on the date of the interview

Desirable:

1. ISO 27001 Lead Auditor

   – Certified by

   NABCB

2. CEH (Certified Ethical Hacker)

   – by

   EC-Council, USA

3. CISSP (Certified Information Systems Security Professional)

   – by

   ISC2

4. MBA

   from a recognized university/institute

4. Experience Requirements

Essential:

• Minimum

  15 years of experience

  in:
• BFSI (Banking, Financial Services, and Insurance)
  
• IT Sector
  
• Information Security Consultancy
  
• Special focus on

  IS Audit / Cyber Security Audit

• Out of which, at least

  10 years must be in a leadership role

Note:

Preferred:

• Experience conducting

  Red Team exercises

• Experience in

  Vulnerability Assessment and Penetration Testing (VA-PT)

5. Specific Skill Requirements

• Hands-on experience with

  VAPT tools

  , such as:
• Nessus, Retina, SAINT, Kali Linux, etc.
  
• Implementation of

  CERT-In

  and

  regulatory advisories/guidelines

  in IS Audit and Cyber Security frameworks
• Sound knowledge of

  Data Privacy Standards

  (e.g., GDPR, PDPB, etc.)
• Experience in

  Supply Chain Cyber Risk assessment

  during

  vendor audits

6. Key Responsibilities

• Plan, execute, and report on

  Information Systems Audits

  and

  Cyber Security Audits

• Develop and implement

  cybersecurity audit frameworks

  aligned with regulatory and organizational policies
• Lead Red Team assessments,

  penetration testing

  , and simulate threat scenarios
• Collaborate with internal teams to assess and

  mitigate cyber risks

• Ensure compliance with

  CERT-In, RBI, SEBI, and other regulatory advisories

• Oversee and improve the organization’s

  cybersecurity audit readiness

• Provide

  strategic leadership

  in identifying vulnerabilities and recommending security enhancements
• Conduct

  vendor and third-party audits

  with a focus on

  supply chain cyber risks

• Maintain up-to-date expertise in

  industry trends, standards, and tools

  relevant to information security and audit

7. Compensation & Benefits

[Insert details about compensation structure, grade, benefits, performance bonus, etc., if applicable.]

8. Employment Type

• Full-Time
  
• Regular / Contractual [Specify if needed]
  
• Location flexibility: [On-site / Hybrid / Remote]
  

9. Selection Process

• Screening of applications based on eligibility
  
• Interview (Technical + HR)
  
• Verification of CISA and other credentials
  
• Final selection by panel