Lead - Auditor - Cyber Security Domain

Reporting Structure: Reports to AVP

Education: Graduate in Computer Science/IT or B. Tech or BCA

Certifications:

• CISA / CISM / CISSP / CEH / CRISC
• ISO 27001 Lead Auditor/Lead Implementer
• Additionally, domain-specific certifications below may be preferred.

Application & API Security:

• MCSD
• Certification in Mobile application security testing
• Java certifications
• Certifications in API security

Database Security:

• MCDBA
• Oracle database
• Certification in big data / analytics

Network Security:

• CCNA
• Certified Firewall administrator

Payments Security:

• Relevant certifications into ATM security, Cards / Payments security

Cloud Security:

• CCSK/CCSP

Experience:

• 8+ years of experience in the field of Information Security Operations, Information System Audits encompassing experience into any of the Banking Technologies Domains Application Security, Database management and administration, / Network security and SOC / Payment systems in addition to IT General controls (ITGC).
• Exposure to the Banking / Finance / Payment industry domains would be preferrable.
• Should have good understanding of Cyber Security requirements from RBI & Cert-in.

Responsibilities:

• Candidate will have to travel to perform audits, as per RBI requirements.
• Conducting audit of Information security policies, procedures, and processes to identify process/design gaps.
• Conduct audits of information security systems and infrastructure to verify systems are secure and support the related applications/business processes.
• Conducts audits in different banking technology domains such as Active Directory, WAF, Network access security, End-point security, Application VA/PT/AppSec, SDLC, Database management and security, PCI-DSS, ATM controls, Cards (Debit/Credit) security, Payment-gateway, Cloud and API Security and IT General Controls etc.
• Developing project plans, work programs, evaluating system controls, identify risks and audit gaps, documenting results in proper audit report format, making recommendations, and communicating information to stakeholders.
• Support in maintaining audit checklist and documents, trend analysis, preparing presentations etc.