Technical Lead- Audits and Compliance

Job Description

Technical Responsibilities and Experience (6 to 8 years of relevant experience): Robust understanding and practical engagement with ISO 27001:2022, NIST, SOC2 Framework Strong Hands-on experience in conducting and facing various IT system Audits Experience and knowledge of various Regulatory and Statutory bodies and guidelines such as RBI, SEBI, IRDAI, NPCI etc. Experience and knowledge in Documentation and Reporting capabilities such as creating, maintaining and reviewing various Policies, Procedures, Guidelines etc. Experience and knowledge in conducting various critical activities such as BCP / DR Drills, Phishing Simulations, Table Top Exercises, Cyber Drills. Strong working experience with reviews of Contracts and MSAs. Supporting various pre-sales activities such as RFP reviews. Hands on technical knowledge and experience with various IT related systems and Tools such as AV, EDR, Firewalls, Network Devices, WAF, Proxy etc. Strong knowledge and conceptual understanding of various areas such as Application Security, Infrastructure Security, Physical Security. Knowledge of WAFs, DDoS mitigation (e.g., Akamai), and system hardening (e.g., CIS Benchmarks) Strong leadership, stakeholder engagement, and cross-functional communication skills. Excellent communication (written and oral) and interpersonal skills is very much required Knowledge of the Financial landscape would be an added advantage Manage escalations, ensure strong documentation, and adhere to project timelines. Qualifications: Bachelors degree in Information Security, or a related field. Masters Degree or BE would be an additional advantage. Proficient in MS Office tools Word, Excel, and PowerPoint. Certifications: (Preferred but not mandatory) CISA, CISSP, ISO 27001:2022 Lead Auditor, ISO 27001:2022 Lead Implementor Role & responsibilities