IT Security Audit Lead

About the Role

We are hiring an IT Security Audit Lead for a leading global retail group. This role is based in Kochi, Kerala, and requires an on-site presence. The position is designed for a professional with 3–5 years of experience in IT security audits, IT General Controls (ITGC), SOX compliance, ISO 27001, and information security governance. The successful candidate will play a pivotal role in coordinating internal and external audits, evaluating control design and operating effectiveness, validating audit evidence, identifying control gaps, and driving remediation in collaboration with IT, security, infrastructure, and business teams.

Key Responsibilities

• Coordinate internal, external, and regulatory audits covering IT security, ITGC, SOX, and ISO 27001.
• Act as the primary point of contact for audit-related queries, evidence requests, and stakeholder coordination.
• Conduct process walkthroughs to evaluate IT systems, business processes, and control environments.
• Assess compliance with internal security policies, procedures, and applicable control frameworks.
• Perform ITGC testing across access management, user access reviews, change management, and IT operations (including monitoring and backups).
• Evaluate control design and operating effectiveness, document findings, and recommend corrective actions.
• Collect, review, and validate audit evidence, including system logs, access reports, policies, change records, and configuration reports.
• Maintain audit documentation, evidence repositories, testing workpapers, and control matrices.
• Track audit observations, corrective actions, remediation owners, and closure timelines.
• Prepare audit reports, dashboards, and management updates.
• Review identity and access management controls, including Active Directory, Microsoft Entra ID, MFA, and Conditional Access.
• Assess security logging, monitoring, endpoint protection, vulnerability management, and patch management controls.
• Participate in information security risk assessments and control-gap analysis.
• Collaborate with IT, infrastructure, cloud, security, application, and business teams to ensure timely completion of audit deliverables.

Requirements (Must-Have Skills)

• 3–5 years of experience in IT security, IT audit, ITGC, risk, or compliance.
• Practical experience supporting or executing internal and external IT audits.
• Hands-on experience with IT General Controls (ITGC).
• Working experience with SOX compliance and control testing.
• Experience in collecting, validating, and documenting audit evidence.
• Knowledge of control design, operating effectiveness, audit exceptions, and remediation tracking.
• Understanding of information security policies, procedures, and risk assessments.
• Familiarity with user access reviews and Active Directory.
• Proficiency in Identity and Access Management (IAM) concepts.
• Strong written and verbal communication skills.
• Advanced proficiency in MS Excel, MS Word, and MS PowerPoint.
• Bachelor’s degree in B.Tech, BCA, or equivalent.

Preferred Skills (Nice-to-Have)

• ISO/IEC 27001 knowledge.
• ISO 27001 Lead Auditor or Lead Implementer certification.
• CISA, Security+, CEH, or CISSP certifications.
• Experience with SOC 1 or SOC 2 audits.
• Experience in cloud-first environments, specifically Microsoft Azure.
• Familiarity with Azure AD / Microsoft Entra ID, MFA, and Conditional Access.
• Exposure to AWS or Google Cloud Platform (GCP).
• Hands-on exposure to SIEM, security logging, and monitoring tools.
• Familiarity with Endpoint Detection and Response (EDR).
• Familiarity with Mobile Device Management (MDM).
• Familiarity with Email Security, WAF, IDS/IPS, and DLP.
• Experience with vulnerability management tools.
• Understanding of NIST and CIS security frameworks.
• Experience with backup and restoration controls, antivirus, and patch management.
• Experience with security awareness training.
• Experience preparing audit dashboards and management metrics.

Benefits & Perks

• Competitive compensation package (₹6–12 LPA based on experience and expertise).
• Opportunity to work with a large retail group with a global presence.
• Professional growth in a structured IT governance and compliance environment.
• Collaborative work culture with exposure to diverse enterprise technologies.

To apply for this position, please use the apply link on this Jobsify job posting.