Audit Compliance with TPRM Support

Outworx Solutions; Navi Mumbai; On-site; INR 1,500,000 - 2,200,000; Full time

Job summary

Outworx Solutions in Navi Mumbai seeks an experienced Audit and Compliance professional to support TPRM L2, and drive audits across internal and customer environments from Ghansoli, Navi Mumbai. The role requires 5+ years of hands-on experience in audit and compliance within BFSI or regulated sectors.

You will manage evidence, control documents, and remediation tracking, coordinating with SOC, cloud, and legal teams to ensure audit readiness and closure.

Qualifications

• Qualification: BE / BTech / MCA / MTech (Similar Education Background)
• Certifications: ISO 27001 LA / LI, CISA, CRISC, CISM, or equivalent.
• Minimum 5 years of hands-on audit and compliance experience within Insurance, Reinsurance, BFSI, or regulated financial services
• Experience in audit support, cybersecurity compliance, or governance functions

Responsibilities

• Support cybersecurity audits, assessments, compliance reviews, and evidence management activities across internal and customer environments.
• Coordinate collection, validation, and maintenance of audit evidence, control documents, SOPs, reports, configurations, and compliance artifacts.
• Track closure of audit observations, non-conformities, risk findings, and remediation actions with relevant stakeholders.
• Assist in implementation and monitoring of security and compliance requirements aligned to internal policies, contractual commitments, and regulatory obligations.
• Review security and compliance requirements for vendors, partners, service providers, and outsourced engagements.
• Assist in control mapping against frameworks such as ISO 27001, NIST CSF, SOC requirements, customer requirements, sectoral regulations, and organization policies.
• Prepare governance dashboards, audit status reports, closure summaries, compliance trackers, and management updates.
• Coordinate with internal teams such as SOC, cloud, infrastructure, network, application, HR, procurement, and legal for audit / compliance dependencies.
• Support policy reviews, process documentation, and control evidence standardization.
• Ensure timely follow-up with stakeholders for pending evidence, action items, exceptions, and risk treatment plans.
• Participate in risk reviews, governance forums, and compliance program activities as required.
• Support customer questionnaires, due diligence responses, and assurance documentation related to cybersecurity controls.

Skills

Audit coordination

Evidence management

Governance reporting

Vendor assessment

Stakeholder coordination

Education

BE / BTech / MCA / MTech

Tools

ISO 27001

NIST CSF

SOC 2

PCI DSS

COBIT

Job description

Job Title: Audit and compliance support with TPRM L2

Location: Ghansoli, Navi Mumbai

Experience: 5+ years

Key Responsibilities:

• Support cybersecurity audits, assessments, compliance reviews, and evidence management activities across internal and customer environments.
• Coordinate collection, validation, and maintenance of audit evidence, control documents, SOPs, reports, configurations, and compliance artifacts.
• Track closure of audit observations, non-conformities, risk findings, and remediation actions with relevant stakeholders.
• Assist in implementation and monitoring of security and compliance requirements aligned to internal policies, contractual commitments, and regulatory obligations.
• Review security and compliance requirements for vendors, partners, service providers, and outsourced engagements.
• Assist in control mapping against frameworks such as ISO 27001, NIST, SOC requirements, customer requirements, sectoral regulations, and organization policies.
• Prepare governance dashboards, audit status reports, closure summaries, compliance trackers, and management updates.
• Coordinate with internal teams such as SOC, cloud, infrastructure, network, application, HR, procurement, and legal for audit / compliance dependencies.
• Support policy reviews, process documentation, and control evidence standardization.
• Ensure timely follow-up with stakeholders for pending evidence, action items, exceptions, and risk treatment plans.
• Participate in risk reviews, governance forums, and compliance program activities as required.
• Support customer questionnaires, due diligence responses, and assurance documentation related to cybersecurity controls.

Qualification and Work Experience

Qualification: BE / BTech / MCA / MTech (Similar Education Background)

Certifications: ISO 27001 LA / LI, CISA, CRISC, CISM, or equivalent.

Work experience: Minimum 5 years of hands-on audit and compliance experience within Insurance, Reinsurance, BFSI, or regulated financial services

• Candidate should have experience in audit support, cybersecurity compliance, or governance functions.
• Good understanding of control documentation, evidence management, remediation tracking, and audit coordination.
• Familiarity with security compliance frameworks such as ISO 27001, NIST CSF, SOC 1/2, PCI DSS, COBIT, and/or sector-specific regulatory frameworks, sector-specific regulatory requirements.
• Understanding of third-party risk management lifecycle and vendor assessment processes.
• Good documentation, reporting, and follow-up management skills.
• Ability to coordinate across technical and non-technical stakeholders for audit readiness and closure.
• Preferred: Experience with risk registers, compliance tools, and governance reporting.
• Familiarity with data privacy obligations under the DPDP Act and GDPR, as applicable to insurance and reinsurance data
• Deep understanding of the regulatory environment governing reinsurance and insurance in India, with awareness of international standards