Roles & Responsibilities:
• Develop audit plans outlining objectives, scope, and methodologies based on the requirements of ISO/IEC 27001 and other applicable standards, as well as the organization's specific security policies and procedures.
• Review documentation, policies, procedures, and controls related to the organization's ISMS to understand the framework and identify areas for focus during the audit.
• Conduct on-site audits at the organization's facilities, interviewing personnel, reviewing documentation, and observing processes to assess compliance with information security requirements.
• Evaluate the effectiveness of risk management processes and controls in place to mitigate information security risks, including threats, vulnerabilities, and impacts.
• Prepare detailed audit reports summarizing findings, observations, and recommendations for corrective actions.
Qualification:
• The person should have an M.tech in Cyber Security or Information Security or MCA, with relevant Experience in the domain of Information Securities
• Certification Required - ISO 27001:2202 Lead Auditor, IRCA Approved Lead Auditor