About the Role :
We are seeking a detail-oriented and technically skilled Information Technology Auditor to join our growing team. In this role, you will assess IT controls, cybersecurity measures, and regulatory compliance across diverse technology environments. This is an excellent opportunity for tech-savvy professionals to gain hands-on experience in IT audits, vendor risk assessments, and compliance frameworks such as ISO 27001, GDPR, SOX, PCI-DSS, and Indian regulatory guidelines (SEBI, RBI, IRDAI).
Key Responsibilities :
- Plan, execute, and document IT audits, including risk assessments and control evaluations.
- Perform IT General Controls (ITGC) and application control testing.
- Support cybersecurity and data protection audits, ensuring alignment with organizational policies.
- Conduct vendor and third-party security assessments to evaluate contractual, security, and regulatory compliance.
- Participate in compliance reviews and certifications (ISO 27001, GDPR, SOX, PCI-DSS).
- Review adherence to Indian financial regulations including SEBI, RBI, IRDAI guidelines.
- Conduct follow-up audits to validate remediation and closure of findings.
- Collaborate with IT, security, procurement, and business units to understand systems, processes, and risks.
- Stay updated on emerging IT risks, cybersecurity threats, and best practices in IT risk and compliance.
Required Skills & Qualifications :
Bachelors degree in Information Technology, Computer Science, Information Systems, or related field.Solid understanding of IT infrastructure (networks, servers, databases, cloud).Knowledge of information security principles and frameworks (COBIT, NIST, ISO 27001).Awareness of Indian regulatory requirements (SEBI, RBI, IRDAI).Experience with vendor risk management and third-party audits.Proficiency in Microsoft Office and familiarity with audit :Working towards or holding certifications such as CISA, CompTIA Security+, ISO 27001 Lead Auditor.Prior experience in IT audit or risk / compliance functions in FinTech, BFSI, or consulting organizations.(ref : hirist.tech)