Internal Auditor

Internal Auditor

Key Responsibilities

• Collaborate with cross-functional teams to implement best security practices.
• Respond to client and prospect security questionnaires.
• Assist external auditors and customers' auditors with evidence and information requests.
• Organize internal penetration tests and coordinate client-requested penetration testing.
• Act as a liaison for external auditors (ISAE 3402, ISO 27001, ISO 27701), coordinating the delivery of required documents and evidence with internal teams.
• Conduct internal audits for ISAE audit and ISO certifications.
• Create and update policies, procedures, and process flow documents periodically.
• Stay current with emerging technologies, security trends, and best practices to provide informed recommendations.

Qualifications & Skills

• Bachelor's or Master’s degree in Computer Science, Software Engineering, or a related field.
• 3–4 years of professional experience as an auditor with a reputed firm (e.g., KPMG, Deloitte, EY, Accenture).
• Strong knowledge of auditing and security practices.
• Expertise in AWS Cloud, Active Directory (AD), penetration testing, vulnerability management, and firewalls.
• Strong understanding of SOC and NOC operations.
• ISO 27001 Lead Auditor Certification (mandatory).
• Experience in preparing documentation such as policies, procedures, and process flows.
• Hands-on experience in conducting internal audits for ISAE audit and ISO certifications.
• Excellent problem-solving skills and attention to detail.
• Strong verbal and written communication skills.
• Ability to work independently as well as collaboratively within a team.
• Commitment to continuous learning and staying updated on industry standards.