4+ Security audit Jobs in India
Apply to 4+ Security audit Jobs on CutShort.io. Find your next job, effortlessly. Browse Security audit Jobs and apply today!

Job Title: Audit Specialist
Location: Noida
Experience Required: 2-5 years
Employment Type: Full-Time
We are seeking a detail-oriented Audit Specialist to join our compliance team. The ideal candidate will have experience in auditing and ensuring compliance with PCI DSS, ISO 27001, ISO 9001, SOC 2, and other regulatory frameworks. You will conduct internal audits, manage compliance processes, and collaborate with teams to ensure alignment with regulations.
*Key Responsibilities:
1- Conduct internal audits for PCI DSS, ISO 27001, ISO 9001, and other compliance frameworks.
2- Develop and implement audit plans and ensure regular assessments.
3- Identify compliance gaps, document findings, and recommend corrective actions.
4- Prepare detailed audit reports and track remediation progress.
5- Assist with external audits and liaise with regulatory bodies.
6- Provide training on compliance best practices.
*Required Skills & Qualifications:
1- Strong knowledge of compliance standards (PCI DSS, ISO 27001, ISO 9001, SOC 2, etc.).
2- Experience in internal and external auditing, risk assessment, and compliance processes.
3- Strong analytical, problem-solving, and communication skills.
4- Preferred certifications: CISA, CISM, ISO 27001 Lead Auditor, CRISC (not mandatory).
Position : India Practice Head We are seeking an experience and Dynamic individual to lead our Cyber Security services in India. As India Practice Head you will be responsible for driving business growth, managing client relationships, and delivering exceptional cyber security services to our clients.
You will work closely with leadership team
to develop and execute the strategic plan for the India Practice.
Key Responsibilities:
- Lead the Cyber security services practice in India including business development, client relationships management, service delivery and offshore business execution coming from US
- Develop and execute the strategic plan for the India practice in alignment with the global cybersecurity services strategy.
- Build and maintain strong relationships with key clients and stakeholders, ensuring their needs are met and exceeded.
- Drive business growth through the development of new services offerings, market analysis, and competitive intelligence.
- Manage and mentor a team of cybersecurity professionals, providing guidance and support to ensure quality service delivery.
- Ensure compliance with relevant laws, regulations, and industry standards in India.
Requirements:
- Bachelor's or Master's degree in Computer Science, Information Technology, or related field.
- At least 15 years of experience in cybersecurity services, with a proven track record of successful business development and client relationship management.
- Strong knowledge of cybersecurity frameworks and standards, such as ISO 27001, NIST, and PCI DSS, CERT-In
- Experience in managing Departments and mentoring a team of cybersecurity professionals.
- Excellent communication and interpersonal skills, with the ability to build and maintain strong relationships with clients and stakeholders.
- Strong leadership skills, with a proven track record of building and leading high-performance teams. Experience in managing cyber security services for mid-enterprises.
- Ability to research and evaluate potential solutions to determine suitability for the organization’s needs. Capability to work in a fast-paced environment and manage multiple projects simultaneously.
- Keep up to date with the latest cybersecurity trends and technologies.
- If you are a driven and experienced cybersecurity professional with a passion for leading and growing a practice, we encourage you to apply for this exciting opportunity.
Dear Candidate,
Greetings from HCL Technologies Ltd.
- Make sense of Cyber security and compliance frameworks that apply to your business or industry
• Identify business risks, taking into account the role of your hosting service provider
• Determine which Cyber security controls are required to mitigate your identified risks
• Improve collaboration and communication during Cyber security Incident mitigation and response.
• Establish the necessary framework based on NIST Framework to maintain and continually improve your information security program over time based on evolving scope and emerging risks
• Document and track efforts for evidence collection and audit preparation
- will have primary responsibility for coordinating and implementing effective Cyber Security management across the account. This role will ensure that all Supplier obligations are met regarding compliance with Security guidelines, data protection, regulations, Supplier policies, and key controls.
- provide implementation and ongoing operation of Security management framework;
- be responsible for coordinating activities to address the key Security risk exposures;
- ensure Security awareness training of, and assistance in the implementation of robust Security management practices across Security operations;
- direct the design of controls to address emerging or new Security risk and compliance requirements;
- carry out regular and frequent assurance reviews of the design and operating effectiveness of Security controls;
- implement, monitor and report on key Security risk indicators to identify and address emerging risks;
- coordinate with other Service Providers and Security functions, to facilitate client’s audits and inspections;
- manage and report on responses and actions to address Security audit points, inspection deficiencies, or control weakness identified during normal operations.
- review outcome of cyber security risk assessment, timely implement open action items and report progress to stakeholders
- incorporate vulnerability testing as an integral part of change management
- Should have good knowledge of Cyber Security Framework and controls
- CISA ,CISM or CISSP certification should be preferred.
- Have good understanding of Security policy and process along with ITSM process.
Credit cards haven't changed much for over half a century so our team of seasoned
bankers, technologists, and designers set out to redefine the credit card for you - the
consumer. The result is OneCard - a credit card reimagined for the mobile
generation. OneCard is India's best metal credit card built with full-stack tech. It is
backed by the principles of simplicity, transparency, and giving back control to the
user.
The Engineering Challenge
“Re-imaging credit and payments from First Principles”
Payments is an interesting engineering challenge in itself with requirements of low
latency, transactional guarantees, security, and high scalability. When we add credit
and engagement into the mix, the challenge becomes even more interesting with
underwriting and recommendation algorithms working on large data sets. We have
eliminated the current call center, sales agent, and SMS-based processes with a
mobile app that puts the customers in complete control. To stay agile, the entire
stack is built on the cloud with modern technologies.
Check out our apps here:
OneCard (Best credit card app) : www.getonecard.app
OneScore (5 million downloads): http://www.onescore.app" target="_blank">www.onescore.app
Security Compliance Lead
Opportunity:
Opportunity to build GRC practice grounds up for new Age Fintech startup, lead and
implement PCI-DSS, ISO-27001, RBI compliances
What you will do:
● Be SME for all applicable regulations, guidelines and industry best practices
to manage risk and ensure compliance.
● Be the single point of contact for all external entities related to Security and
Compliance communications.
● Owner for all security documentation such as policies, standards, and
procedures.
● Owner for driving security controls across all organisation functions.
● Build continuous assessment practice which is superset of all required
regulatory compliance.
● Manages and supports Information Security Risk Management Life-cycle for
the organization.
● Provide adequate security and compliance against specific standards such as
NIST 800-53, NIST 800-171, ISO 27001, SOX, PCI, HIPAA and other
regulatory requirements.
● Identifies and formally documents deviations from published standards,
estimates risk level, recommends appropriate mitigation countermeasures in
operational and non-operational situations.
● Identify potential areas of IT compliance vulnerability and risk; guide the
accountable stakeholders to develop/implement corrective action plans for
resolution, and provide general guidance on how to avoid or deal with similar
situations in the future. Risks should be identified, assessed and monitored on
an ongoing firm-wide and individual entity basis
Experience Range:
4-8 years of experience in Cybersecurity & Risk Compliance Domain in areas
including and limited to: System Security, Network Security , SOC, Risk &
Compliance Management
Technical Expertise:
● Auditing experience in ISO-27001, SOX, NIST, PCI-DSS
● Experience with AWS Security and Compliance.
● Prior experience in the Banking and Financial domain is nice to have.
● Proven experience in Endpoint Security, Network Security, SIEM,SOC
Advanced security tools – SOAR platform, Vulnerability Management, SIEM
● Experience building Threat Modeling practice
● Strong communication skills