Auditor

Databrackets; Chennai; On-site; INR 600,000 - 900,000; Full time

Benefits offered by this job

Health and wellness benefits

Performance-based incentives

Certification sponsorship

Job summary

Databrackets is seeking an Auditor with 2–3 years of experience in Chennai, India. The role focuses on planning and executing audits across ISO 27001, GDPR, SOC 2, NIST, and ITIL frameworks, ensuring regulatory compliance and effective risk management.

You will lead audits, prepare detailed reports, and collaborate with IT, security, and operations teams to implement remediation actions. A strong understanding of governance and cloud security is essential.

Qualifications

• ISO 27001, GDPR, NIST, SOC 2, ITIL, and internal audit expertise.
• Strong understanding of risk management, IT governance, security frameworks, and compliance programs.
• Experience with audit tools, GRC platforms, and ITSM frameworks.
• Knowledge of cloud security, IT operations, data privacy laws, and cybersecurity best practices.

Responsibilities

• Develop and implement audit plans aligned with ISO, SOC 2, GDPR, NIST, ITIL, and internal standards.
• Conduct risk-based assessments and gap analyses to identify issues.
• Lead internal, external, and third-party audits with regulatory adherence.
• Prepare audit reports with findings and remediation plans.
• Present outcomes to senior management and risk committees.
• Collaborate with IT, security, compliance, and operations teams to implement recommendations.
• Stay updated on regulatory changes and emerging risks.

Skills

ISO 27001

GDPR

NIST

SOC 2

ITIL

GRC tools

ITSM frameworks

Cloud security

Data privacy

Cybersecurity

Education

Bachelor’s/Master’s in IT/CS/Accounting

Tools

Audit tools

GRC platforms

ITSM tools

Job description

Position: Auditor
Experience: 2 to 3 years
Location: Chennai, India
Job Type: Full-time

Key Responsibilities

Audit Planning & Execution

• Develop and implement audit plans aligned with ISO (ISO 27001, etc), SOC 2, GDPR, NIST Framework, ITIL, and internal audit standards.
• Conduct risk-based assessments and gap analyses to identify potential compliance issues.
• Lead and execute internal audits, external audits, and third-party audits, ensuring adherence to industry regulations.
• Evaluate IT controls, security frameworks, and risk management practices in alignment with ISO 27001, SOC 2, GDPR, NIST and ITIL best practices.
• Perform evidence gathering, documentation review, process assessments, and audit reporting.

Compliance & Risk Management

• Ensure organizational compliance with ISO standards, SOC 2, ITIL, GDPR, NIST and other regulatory requirements.
• Identify and mitigate risks by implementing control measures and recommending corrective actions.
• Maintain audit trails, documentation, and risk registers to ensure transparency and regulatory adherence.
• Monitor and evaluate information security, data privacy, and IT governance controls.

Reporting & Stakeholder Management

• Prepare detailed audit reports with findings, recommendations, and remediation plans.
• Present audit outcomes to senior management, risk committees, and external regulators.
• Work closely with IT, security, compliance, and operations teams to implement audit recommendations.
• Provide guidance on policy development, compliance improvements, and best practices.
• Stay updated with industry trends, regulatory changes, and emerging risks in ISO, SOC 2, ITIL, GDPR, NIST and internal audit domains.
• Conduct training and awareness sessions on compliance, risk management, and best practices.
• Contribute to process improvements and automation of audit and compliance processes.

Required Qualifications & Skills

Technical & Professional Skills

• ISO 27001, GDPR, NIST, SOC 2, ITIL, and internal audit expertise.
• Strong understanding of risk management, IT governance, security frameworks, and compliance programs.
• Experience with audit tools, GRC (Governance, Risk, and Compliance) platforms, and ITSM frameworks.
• Knowledge of cloud security, IT operations, data privacy laws, and cybersecurity best practices.

Certifications (Preferred)

• Certified Information Systems Auditor (CISA)
• SOC 2 Implementation Certification
• ITIL Foundation Certification

Soft Skills

• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication, reporting, and stakeholder management abilities.
• Ability to work independently and lead audit teams/projects.
• Detail-oriented with a proactive approach to compliance and risk mitigation.

Education

• Bachelor’s/Master’s degree in Information Technology, Computer Science, Accounting, or a related field.
• Additional certifications in audit, compliance, or security frameworks are a plus.
• Competitive salary based on experience
• Performance-based incentives
• Health and wellness benefits
• Professional development and certification sponsorship