Lead - Auditor - Cyber Security Domain

Reporting Structure: Reports to AVP

Education: Graduate in Computer Science/IT or B. Tech or BCA

Certifications:

- CISA / CISM / CISSP / CEH / CRISC

- ISO 27001 Lead Auditor/Lead Implementer

- Additionally, domain-specific certifications below may be preferred.

Application & API Security:

- MCSD

- Certification in Mobile application security testing

- Java certifications

- Certifications in API security

Database Security:

- MCDBA

- Oracle database

- Certification in big data / analytics

Network Security:

- CCNA

- Certified Firewall administrator

Payments Security:

- Relevant certifications into ATM security, Cards / Payments security

Cloud Security:

- CCSK/CCSP

Experience:

- 8+ years of experience in the field of Information Security Operations, Information System Audits encompassing experience into any of the Banking Technologies Domains Application Security, Database management and administration, / Network security and SOC / Payment systems in addition to IT General controls (ITGC).

- Exposure to the Banking / Finance / Payment industry domains would be preferrable.

- Should have good understanding of Cyber Security requirements from RBI & Cert-in.

Responsibilities:

- Candidate will have to travel to perform audits, as per RBI requirements.

- Conducting audit of Information security policies, procedures, and processes to identify process/design gaps.

- Conduct audits of information security systems and infrastructure to verify systems are secure and support the related applications/business processes.

- Conducts audits in different banking technology domains such as Active Directory, WAF, Network access security, End-point security, Application VA/PT/AppSec, SDLC, Database management and security, PCI-DSS, ATM controls, Cards (Debit/Credit) security, Payment-gateway, Cloud and API Security and IT General Controls etc.

- Developing project plans, work programs, evaluating system controls, identify risks and audit gaps, documenting results in proper audit report format, making recommendations, and communicating information to stakeholders.

- Support in maintaining audit checklist and documents, trend analysis, preparing presentations etc.