As an Internal Auditor , you will be responsible for implementing and monitoring best security practices across the organization. You will review company policies related to security and access controls, and coordinate closely with internal teamsespecially the Cloud and Cybersecurity teams—across our three affiliate companies. You will also act as a key point of contact for external auditors handling certifications such as ISAE 3402 , ISO 27001 , and ISO 27701 . Key Responsibilities Collaborate with cross-functional teams to implement best security practices. Respond to client and prospect security questionnaires. Assist external auditors and customers' auditors with evidence and information requests. Organize internal penetration tests and coordinate client-requested penetration testing. Act as a liaison for external auditors (ISAE 3402, ISO 27001, ISO 27701), coordinating the delivery of required documents and evidence with internal teams. Conduct internal audits for ISAE audit and ISO certifications. Create and update policies, procedures, and process flow documents periodically. Stay current with emerging technologies, security trends, and best practices to provide informed recommendations. Qualifications & Skills Bachelor's or Master’s degree in Computer Science, Software Engineering, or a related field. 3–4 years of professional experience as an auditor with a reputed firm (e.g., KPMG, Deloitte, EY, Accenture). Strong knowledge of auditing and security practices. Expertise in AWS Cloud, Active Directory (AD), penetration testing, vulnerability management, and firewalls. Strong understanding of SOC and NOC operations. ISO 27001 Lead Auditor Certification (mandatory). Experience in preparing documentation such as policies, procedures, and process flows. Hands-on experience in conducting internal audits for ISAE audit and ISO certifications. Excellent problem-solving skills and attention to detail. Strong verbal and written communication skills. Ability to work independently as well as collaboratively within a team. Commitment to continuous learning and staying updated on industry standards.