IT Audit & Compliance

skillventory - A Leading Talent Research Firm; Bengaluru; On-site; INR 500,000 - 800,000; Full time

Job summary

A leading talent research firm in Bengaluru seeks an IT Audit Specialist at entry-level to manage audits related to compliance with SEBI guidelines and IT security frameworks. The role involves conducting audits, ensuring data protection, and drafting IT policies. Ideal candidates will have knowledge of audit frameworks and cybersecurity guidelines, contributing to compliance and operational efficiency.

Qualifications

• Entry-level position related to IT auditing.
• No specific education mentioned but familiarity with audit frameworks is essential.
• Skills in compliance reporting and data protection audits.

Responsibilities

• Ensuring compliance with SEBI Guidelines and auditing IT operations.
• Conducting internal and operational audits.
• Creating reports for various audits and managing documentation.

Skills

Knowledge of audit frameworks & standards

Familiarity with SEBI Cyber Security Guidelines

Understanding of ISO 27001

Understanding of COBIT

Understanding of NIST

Understanding of SOC 2 frameworks

Conducting IT risk assessments

Experience with tools like Nessus

Experience with risk registers

Understanding data classification and encryption

Job description

1 week ago Be among the first 25 applicants

• Ensuring compliance with SEBI Guidelines and staying updated with new SEBI rules
• Creating reports for multiple audits and submitting them to exchanges
• Conducting operational audits evaluating company operations related to IT, security, and trading
• Enforcing policies and maintaining documentation
• Performing data protection audits and application audits
• Conducting internal audits and staying updated with the latest audit frameworks
• Core Technical & Compliance Skills for IT Audit:
• Knowledge of audit frameworks & standards
• Familiarity with SEBI Cyber Security Guidelines
• Understanding of ISO 27001, COBIT, NIST, SOC 2 frameworks
• Awareness of SEBI circulars regarding system audits, VAPT frequency, and cyber incident reporting timelines
• Conducting and documenting IT risk assessments
• Understanding risk ratings such as impact, residual risk, and control mapping
• Experience with risk registers and risk treatment plans
• Reviewing access management, change management, backup, logging, and resilience
• Ensuring event log generation, session handling, and security controls are in place
• Experience with tools like Nessus
• Policy and Process Review:
• Drafting and validating IT policies related to passwords, backups, access, data retention, and encryption
• Enforcing policies across systems and verifying logs, permissions, and configurations
• Data Protection & Privacy Audits:
• Understanding data classification, masking, retention, and secure storage
• Ensuring encryption in transit and at rest, and reviewing user access logs
• Security Control Validation:
• Coordinating VAPT, patch audits, and firewall rule reviews
• Checking for 2FA, antivirus, endpoint control agents, SFTP access, SSH key usage, and cloud IAM policies
• Documentation, Reporting & Regulatory Submissions:
• Creating audit trails, evidence repositories, and compliance dashboards
• Preparing reports for SEBI, NSE/BSE, and internal teams
• Formatting audit findings per regulatory templates
• Reviewing tools like Zabbix, Nagios, or SIEM systems
• Verifying log retention, event types, and audit policy alignment
• Access Control Auditing:
• Reviewing LDAP/IAM policies and ensuring least privilege and RBAC implementation

Seniority level

• Entry level

Employment type

• Full-time

Job function

• Accounting/Auditing and Finance

Industries

• Staffing and Recruiting

Referrals increase your chances of interviewing at skillventory - A Leading Talent Research Firm by 2x

Sign in to set job alerts for “IT Audit Specialist” roles.

Bangalore Urban, Karnataka, India 8 hours ago