ISMS Audit Lead – Information Security – Navi Mumbai – 5 to 6 Years Experience
Job Overview
-
Date Posted22 November 2024
-
Location
-
Expiration date22 January 2025
-
Experience5 Year
-
GenderAny
Job Description
We are seeking a highly skilled and experienced ISMS Audit Lead to manage and oversee compliance projects in alignment with key industry standards. The ideal candidate will lead a team to conduct risk assessments, implement compliance frameworks, and deliver exceptional project outcomes while interacting directly with clients.
Responsibilities:
Leadership and Team Management:
- Lead and mentor a team of information security professionals implementing and auditing ISMS, SOC2, and PCI-DSS frameworks.
- Provide training and support to achieve project objectives and ensure compliance excellence.
Compliance and Audit Management:
- Oversee ISMS, SOC2, PCI-DSS compliance frameworks, and conduct regulatory audits such as RBI and SEBI.
- Execute ITGC audits and prepare comprehensive reports.
Risk Assessment and Mitigation:
- Perform risk assessments using the NIST framework, identifying vulnerabilities and proposing effective mitigation strategies.
Client Interaction and Project Reporting:
- Serve as the main point of contact for clients, addressing inquiries and ensuring clear communication throughout projects.
- Prepare detailed reports on audit findings, compliance status, and project updates.
Cybersecurity Awareness and Training:
- Conduct security awareness sessions for teams and clients to foster a cybersecurity-focused culture.
- Develop training materials and lead workshops promoting information security best practices.
Job Requirements
• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• 5-6 years of experience in information security compliance, with expertise in ISMS, SOC2, and PCI-DSS frameworks.
• Certifications such as CISA, ISO 27001 Lead Auditor, or similar are a plus.
• Strong knowledge of RBI and SEBI regulatory frameworks.
• Familiarity with NIST risk assessment and mitigation strategies.
• Excellent communication and client interaction skills.
• Proven leadership and team management capabilities.
Preferred Qualifications
• Advanced certifications in information security.
• Hands-on experience with large-scale compliance and regulatory audits.
About the Company
9USRcraft is a leading firm specializing in information security compliance, audit services, and cybersecurity solutions. We are committed to helping organizations achieve regulatory compliance and improve their security posture.