Information Security Audit Specialist

Tekskills Inc.; Hyderabad; Presencial; INR 1.500.000 - 2.500.000; Jornada completa

Descripción de la vacante

Tekskills Inc. in Hyderabad seeks an Information Security Audit Specialist to design comprehensive audit plans, define critical audit areas, and perform TOE and TOD to ensure risk-based coverage.

You will collaborate with various departments, enhance audit announcements and execution, and streamline the audit framework using industry best practices. The ideal candidate brings 10+ years of audit experience, deep information security knowledge, and proficiency with ISO 27001, NIST, and TISAX,

Formación

• Minimum 10 years of audit experience.
• Deep knowledge of information security principles and controls.
• Familiarity with ISO 27001, NIST, TISAX.
• Strong communication and interpersonal skills.

Responsabilidades

• Develop a detailed audit plan covering all critical areas of the organization.
• Identify and define key audit areas to ensure comprehensive coverage.
• Prepare a statement highlighting the advantages of conducting audits based on the defined audit areas; emphasize risk-based approach.
• Conduct Test of Effectiveness (TOE) and Test of Design (TOD) for various audit areas.
• Enhance the process for audit announcements and execution to ensure efficiency and effectiveness.
• Streamline the audit framework and process templates to align with industry best practices.
• Define exception approval rules and quality assurance processes to maintain high standards in audit execution.
• Implement robust reporting and escalation processes to address audit findings promptly.
• Work closely with departments to gather information and communicate findings and recommendations clearly to stakeholders.

Conocimientos

Audit experience

InfoSec principles

ISO 27001 knowledge

NIST knowledge

Interpersonal skills

Herramientas

Audit management tools

Descripción del empleo

• We are seeking a highly skilled and experienced Information Security Audit Specialist to join our team. The successful candidate will be responsible for preparing a comprehensive audit plan, defining audit areas across the organization, and conducting both Test of Effectiveness (TOE) and Test of Design (TOD). The role also involves enhancing the audit announcement and execution process, streamline, and updating the audit framework.

Key Responsibilities:

• To develop a detailed audit plan covering all critical areas of the organization.
• To identify and define key audit areas to ensure comprehensive coverage.
• To prepare a statement highlighting the advantages of conducting audits based on the defined audit areas. Emphasize the benefits of a risk-based approach to auditing.
• To conduct Test of Effectiveness (TOE) and Test of Design (TOD) for various audit areas.
• To enhance the process for audit announcement and execution to ensure efficiency and effectiveness.
• To streamline the audit framework and process templates to align with industry best practices.
• To define exception approval rules and quality assurance processes to maintain high standards in audit execution.
• To implement robust reporting and escalation processes to address audit findings promptly.
• To work closely with various departments to gather necessary information and ensure audit readiness and communicate audit findings and recommendations clearly to stakeholders.

Must have skills:

• Must have prior audit experience of 10+ years.
• Must have In-depth knowledge of information security principles, practices, and have prior experience in handling technical security controls.
• Must have knowledge of industry standards and frameworks such as ISO 27001, NIST, TISAX.
• Effective communication and interpersonal skills.

Preferred Skills:

• Professional certifications such as CISA, CISSP, or equivalent is highly desirable.
• Experience with audit management tools and software.