Description :
We are looking for an experienced IT Audit & Compliance Specialist to manage and oversee compliance, audit coordination, and control assurance activities across multiple IT service towers. The role requires strong understanding of ISO 27001 : 2013 standards, exceptional stakeholder management skills, and the ability to lead audit cycles with precision and consistency.
Key Responsibilities :
- Serve as the single point of contact for all compliance, control, and audit-related activities across in-scope IT services.
- Coordinate and manage internal and external audit responses, ensuring alignment with Cognizants service delivery and contractual obligations.
- Facilitate the collection, validation, and submission of audit documentation, evidence, and artifacts from various service towers and stakeholder groups.
- Lead and support half-yearly internal audits and annual external audits, driving timely execution, tracking findings, and ensuring prompt closure.
- Ensure adherence to ISO 27001 : 2013 standards, including conducting risk assessments, validating security controls, and supporting continuous improvement initiatives.
- Work closely with client teams and internal service towers to address audit findings and implement corrective / preventive action plans.
- Maintain and update audit logs, compliance trackers, dashboards, and governance reports for clear oversight and transparency.
- Support audit readiness activities and promote a culture of compliance across delivery units.
Required Skills & Qualifications :
Proven experience in IT audit, compliance, or information security, specifically within ISO 27001 : 2013 frameworks.Strong knowledge of information security controls, risk management methodologies, and regulatory compliance requirements.Excellent organizational, communication, and stakeholder management skills to coordinate cross-functional audit activities.Ability to understand, interpret, and translate audit requirements into actionable tasks, processes, and documentation.Hands-on experience with audit management tools, ticketing systems, and documentation or workflow platforms (e.g., Confluence, JIRA, ServiceNow).Preferred Qualifications :
Certifications such as ISO 27001 Lead Auditor, CISA, or CISM.Experience in a managed services environment or multi-tower IT service delivery structure.Working knowledge of additional compliance frameworks such as GDPR, SOC 2, or similar regulatory standards.(ref : hirist.tech)