Assistant Manager – Application Security, IT Audit & GRC

Location: Kochi, Kerala

Employment Type: Full-Time

Work Mode: On-site

Experience: 5–6 Years

Compensation: Salary is not a constraint for the right candidate

About the Hiring Organization

We are hiring on behalf of one of India's most recognized retail enterprises with a strong global presence and decades of excellence. As part of its ongoing digital transformation journey, the organization is strengthening its Information Security, IT Audit, and Governance, Risk & Compliance (GRC) functions to support enterprise applications, ERP platforms, cloud infrastructure, and business-critical systems.

This is an excellent opportunity for Information Security professionals looking to work on enterprise-scale application security, IT audits, vulnerability management, and regulatory compliance in a collaborative and technology-driven environment.

About the Role

We are looking for an Assistant Manager – Application Security, IT Audit & GRC with 5–6 years of relevant experience in Information Security, Application Security, IT Audits, or Governance, Risk & Compliance.

The ideal candidate should have practical experience supporting internal and external IT audits, application security assessments, Vulnerability Assessment & Penetration Testing (VAPT), ERP/application security reviews, and user access governance. You will work closely with internal technology teams, auditors, infrastructure teams, and business stakeholders to strengthen the organization's security posture and compliance.

Key Responsibilities

Application Security

1. Support application security reviews for web applications, APIs, and enterprise applications.
2. Assist in Vulnerability Assessment & Penetration Testing (VAPT) activities.
3. Track identified vulnerabilities and coordinate remediation with application teams.
4. Support Secure SDLC initiatives and basic application security testing.

IT Audit & ERP Security

1. Support Internal, External, and Regulatory IT Security Audits.
2. Participate in ERP and enterprise application security reviews.
3. Perform User Access Reviews (UAR), role validation, and privileged access verification.
4. Assist in IT General Controls (ITGC) reviews and audit evidence collection.
5. Track audit observations until closure.

Governance, Risk & Compliance

1. Support implementation of Information Security policies and standards.
2. Assist in technology risk assessments and compliance reviews.
3. Support compliance activities aligned with ISO 27001, NIST, RBI, or similar frameworks.
4. Maintain audit documentation, risk registers, and compliance reports.

Security Operations Support

1. Assist in security incident investigations and remediation tracking.
2. Review authentication logs, access controls, and endpoint compliance.
3. Coordinate with Infrastructure, ERP, Application, and Audit teams on security initiatives.

Documentation & Reporting

1. Prepare audit reports, risk assessments, compliance documentation, and executive summaries.
2. Maintain security evidence, SOPs, audit trackers, and remediation status reports.

Must-Have Skills

1. Information Security Audits
2. Internal & External IT Audit Support
3. Application Security & Secure SDLC Fundamentals
4. Vulnerability Assessment & Penetration Testing (VAPT)
5. ERP/Application Security Reviews
6. User Access Reviews (UAR) & Access Governance
7. IT General Controls (ITGC)
8. Governance, Risk & Compliance (GRC)
9. ISO 27001, NIST, RBI Guidelines, or similar frameworks
10. Security Assessment Tools (Burp Suite, Nessus, OWASP ZAP, Nmap, or equivalent)

Good-to-Have Skills

1. Active Directory & Identity Access Management
2. SIEM Platforms
3. Azure, AWS, or GCP Security Fundamentals
4. Endpoint Security & EDR Solutions
5. API Security Testing
6. ERP Platforms (Dynamics 365, SAP, Oracle ERP, etc.)
7. CEH, CISA, ISO 27001 LA/LI, Security+, or similar certifications

Preferred Candidate Profile

1. 5–6+ years of experience in Information Security, IT Audit, Application Security, or GRC.
2. Hands-on experience supporting IT security audits and compliance initiatives.
3. Experience with VAPT coordination and application security assessments.
4. Familiarity with ERP security reviews and user access governance.
5. Good understanding of IT risk management and audit documentation.
6. Strong analytical, communication, and stakeholder coordination skills.
7. Candidates willing to build a long-term career in Kochi are preferred.
8. Malayalam speaking and understanding will be an added advantage.

Please fill the preapplication answers