GRC – Lead Auditor

Arting Digital; Mumbai; On-site; INR 850,000 - 1,400,000; Full time

Job summary

Arting Digital Private Limited is seeking a skilled GRC – ISO 27001 Lead Auditor with 2–5 years of experience in governance, risk and compliance, IT security audits and information security standards. You will develop and implement information security and compliance strategies and prepare compliance documentation across ISO 27001, ISO 27701, SOC 2, PCI DSS, GDPR, NIST.

The role involves leading internal audits, risk assessments, and coordinating third-party reviews, conducting IT compliance

Qualifications

• GRC and IT audits experience in information security.
• Knowledge of ISO 27001/27701, ITGC, SOC 2, PCI DSS, GDPR, and NIST frameworks.
• Experience in internal auditing, risk assessment, control testing, and compliance documentation.

Responsibilities

• Develop and implement information security and compliance strategies, and track the status of IT security audit recommendations.
• Prepare and maintain compliance documentation for ITGC, ISO 27001, ISO 27701, SOC 2, PCI DSS, GDPR, NIST, and other applicable regulatory frameworks.
• Lead internal audits, conduct self-assessments, and coordinate third-party risk assessments covering IT infrastructure, operational processes, and security controls.
• Conduct scheduled and targeted IT compliance audits for clients across sectors, including Banking/NBFC, Power, IT, Manufacturing, and Services.
• Develop and deliver information security awareness and training programs.
• Map various IT, information security, and cybersecurity standards to integrated compliance frameworks and risk assessment processes.
• Identify compliance gaps, recommend corrective actions, and monitor remediation activities to ensure adherence to applicable standards and regulations.

Skills

GRC auditing

IT audits

Information security compliance

ISO 27001 & ISO 27701

ITGC, SOC 2, PCI DSS, GDPR, NIST

Internal auditing

Risk assessment

Control testing

Documentation

Stakeholder management

Job description

Arting Digital Private Limited | Full time

We are looking for a skilled GRC – ISO 27001 Lead Auditor with 2–5 years of experience in Governance, Risk, and Compliance (GRC), IT security audits, and information security standards.
Key Responsibilities

Develop and implement information security and compliance strategies, and track the status of IT security audit recommendations.

Prepare and maintain compliance documentation for ITGC, ISO 27001, ISO 27701, SOC 2, PCI DSS, GDPR, NIST, and other applicable regulatory frameworks.

Lead internal audits, conduct self-assessments, and coordinate third-party risk assessments covering IT infrastructure, operational processes, and security controls.

Conduct scheduled and targeted IT compliance audits for clients across sectors, including Banking/NBFC, Power, IT, Manufacturing, and Services.

Develop and deliver information security awareness and training programs.

Map various IT, information security, and cybersecurity standards to integrated compliance frameworks and risk assessment processes.

Identify compliance gaps, recommend corrective actions, and monitor remediation activities to ensure adherence to applicable standards and regulations.

Required Skills

Hands-on experience in GRC, IT audits, and information security compliance.

Knowledge of ISO 27001 and ISO 27701, ITGC, SOC 2, PCI DSS, GDPR, and NIST frameworks.

Experience in internal auditing, risk assessment, control testing, and compliance documentation.

Strong analytical, documentation, communication, and stakeholder management skills.

Candidate Preference

Candidates with relevant ISO 27001 Lead Auditor experience or certification will be preferred.