Senior Associate - IT
HybridBengaluru, Karnataka, India
Job Summary
Support and maintain compliance for ISO 27001, SOC 2, SWIFT, and other security audits by coordinating internal and external activities, collecting evidence, and tracking findings. Maintain security policies, procedures, and audit documentation while assisting with Third-Party Risk Management and reviewing vendor security questionnaires. Review security clauses in MSAs, SOWs, and DPAs to ensure controls are implemented and maintained across the organization. Work with internal teams and support customer security assessments as needed. This role requires 4–8 years of experience in information security, audit, or compliance, with knowledge of ISO 27001, SOC 2, and risk management frameworks.
Required Qualifications
- 4–8 years of experience in information security, audit, or compliance
- Knowledge of ISO 27001, SOC 2, and other security frameworks
- Experience handling audits and preparing audit evidence
- Understanding of risk management and vendor security reviews
- Strong communication and documentation skills
- Hybrid 3 Days office and 2 Days WFH in a week
- 8.00 AM to 5.00 PM OR 12.00 PM to 9.00 PM
- Engineering Degree in Computer Science/MCA or any other Bachelor's degree with the relevant experience
Desired Qualifications
- Experience in TPRM and contract/security clause review
- Familiarity with GRC tools
- CISA certification
- CISM certification
- ISO 27001:2022 Lead Auditor certification
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.