IT Audit

Overview

Paytm's Internal Audit team is seeking an experienced Information Security and Cloud Security Auditor to conduct IT and cloud security audits, ensure regulatory compliance, and enhance information security policies and procedures.

What you'll do

• Conduct IT and cloud security audits across IT General Controls, Information Security Controls, Cloud Security, Network Security, Vulnerability Management, and Vendor Risk Assessments.
• Assess compliance with relevant laws, regulations, and organizational policies, including regulatory requirements for on-premises and cloud environments.
• Develop and enhance information security and cloud security policies and procedures in alignment with industry best practices.
• Maintain thorough documentation of audit findings, risk assessments, and security measures for internal and external reporting.
• Validate ITGC, cloud security, and application-specific controls, and manage audit documentation including risk assessments, working papers, audit program checklists, and evidence gathering.
• Follow up on and ensure closure of non-compliance issues identified during audits.
• Manage and oversee third-party risk assessments and audits, ensuring robust security controls for traditional and cloud-based service providers.
• Lead and participate in the development, migration, and implementation of security controls and policies for network and cloud security solutions.
• Conduct risk-based security assessments on internal, vendor, and third-party hosted environments, covering traditional IT and cloud infrastructure.
• Participate in product and vendor selection processes, contributing to the implementation and integration of new technologies, with emphasis on cloud security solutions.

What you'll need

• Minimum 7 years of experience in information security and auditing, with a strong background in cloud security and the banking and IT industries.
• Proven experience performing IT and cloud security audits, validating ITGC and cloud application controls, and maintaining audit documentation.
• Hands-on experience with vulnerability management, risk management, physical security, identity & access management, encryption, secure development, incident management, security infrastructure, and security policy for on-premises and cloud environments.
• Expertise in third-party risk management, regulatory compliance, and managing IT audit findings in traditional and cloud-based contexts.
• Strong analytical and problem-solving skills.
• Excellent communication and documentation skills.
• Ability to manage multiple projects and meet deadlines.
• Strong understanding of IT, cloud security, and cybersecurity frameworks and standards.
• Proficiency in security assessment tools and technologies, particularly those related to cloud environments.
• Bachelor's or Master's degree in Information Technology, Cyber Security, or a related field.

Nice to have

• ISO 27001, CNSS, CCNA, CISA, CISM, or CISSP certification.
• Detailed knowledge of security tools, PCI-DSS, general ITGC controls, compliance testing, cloud risk assessment, GRC, OWASP, MITRE ATT&CK, change management, and policies and procedures.
• Proficiency in AWS, Azure, Google Cloud Platform, Palo Alto, Fortinet and Checkpoint firewalls, SOAR (Cortex), and Forcescout.

Details

• Location: Noida, Uttar Pradesh, India.