GRC – Lead Auditor

Arting Digital Private Limited; Mumbai; On-site; INR 900,000 - 1,400,000; Full time

Job summary

Arting Digital Private Limited is seeking a skilled GRC – ISO 27001 Lead Auditor with 2–5 years of experience in governance, risk and compliance, IT security audits, and information security standards. You will develop and implement information security and compliance strategies, and track the status of audit recommendations.

You will prepare compliance documentation for ITGC, ISO 27001, ISO 27701, SOC 2, PCI DSS, GDPR, NIST, and other applicable frameworks, lead internal audits, and coordinate

Qualifications

• 2–5 years of experience in GRC, IT security audits and information security compliance.
• Knowledge of ISO 27001, ISO 27701, SOC 2, PCI DSS, GDPR and NIST frameworks.
• Experience in internal audits, risk assessment, control testing and compliance documentation.

Responsibilities

• Develop and implement information security and compliance strategies and track IT security audit recommendations.
• Prepare and maintain compliance documentation for ITGC, ISO 27001, ISO 27701, SOC 2, PCI DSS, GDPR, NIST and other frameworks.
• Lead internal audits, conduct self-assessments, and coordinate third-party risk assessments.

Skills

GRC & IT audits

Information security compliance

Stakeholder management

Analytical skills

Tools

ISO 27001

ISO 27701

SOC 2

PCI DSS

GDPR

NIST

Job description

Arting Digital Private Limited | Full time

We are looking for a skilled GRC – ISO 27001 Lead Auditor with 2–5 years of experience in Governance, Risk, and Compliance (GRC), IT security audits, and information security standards.
Key Responsibilities

Develop and implement information security and compliance strategies, and track the status of IT security audit recommendations.

Prepare and maintain compliance documentation for ITGC, ISO 27001, ISO 27701, SOC 2, PCI DSS, GDPR, NIST, and other applicable regulatory frameworks.

Lead internal audits, conduct self-assessments, and coordinate third-party risk assessments covering IT infrastructure, operational processes, and security controls.

Conduct scheduled and targeted IT compliance audits for clients across sectors, including Banking/NBFC, Power, IT, Manufacturing, and Services.

Develop and deliver information security awareness and training programs.

Map various IT, information security, and cybersecurity standards to integrated compliance frameworks and risk assessment processes.

Identify compliance gaps, recommend corrective actions, and monitor remediation activities to ensure adherence to applicable standards and regulations.

Required Skills

Hands-on experience in GRC, IT audits, and information security compliance.

Knowledge of ISO 27001 and ISO 27701, ITGC, SOC 2, PCI DSS, GDPR, and NIST frameworks.

Experience in internal auditing, risk assessment, control testing, and compliance documentation.

Strong analytical, documentation, communication, and stakeholder management skills.

Candidate Preference

Candidates with relevant ISO 27001 Lead Auditor experience or certification will be preferred.