We are looking for an Information Security Auditor.
Experience:

3-4 years

Qualification:

Any of the below

BE, B.Tech, MSc (Information Technology), CISA, CISSP, CEH

General Description:

Candidates must possess hands-on audit experience in IT general controls.

As Information Technology Auditor, you will examine, evaluate and verify policies, procedures and internal controls around information systems and networks.

Exposure to ISO27001, SSAE16, Vulnerability Assessment and Penetration Testing, Security Technologies is an added advantage.

Responsibilities:
  • Timely completion of information technology and information security audits in a manner that is consistent with the professional standards set by Qadit.
  • Adequately analyze and document all information systems and related controls, and develop an appropriate audit program to test the controls identified.
  • Evaluate the adequacy of security and processing controls as they relate to each audit, and the effectiveness of general IT controls in effect in the IT environment.
  • Review the means of safeguarding information assets and monitor ongoing performance metrics established by the IT and Security Departments of clients.
  • Prepare audit work papers according to established corporate guidelines and industry standards, and as applicable create audit reports.
  • Maintain and enhance audit work paper templates.
  • Maintain active communication with clients to manage expectations, ensure satisfaction, make sure deadlines are met, and lead change efforts effectively.
  • Team with partners and senior managers on proposals and business development calls.
Preferable experience in:

1. Conducting vulnerability assessments & penetration testing – analyzing related reports.

2. Running VA PT tools

3. Web application security

4. IT general computer controls audits

5. Network audits

Other Information:

Position will be based in Chennai, but will need to travel extensively both within and outside India.

Do you fit the bill ? Send your biodata / profile to info@qadit.com

Position 1:

Infosec Trainee Auditor – GRC

Location:

Chennai

Role Summary

Support IT audits, risk assessments, and compliance tasks in the IT GRC domain.

Education

B.E./B.Tech (CS/IT/ECE), B.Sc/M.Sc (IT/CS), or B.Com/BBA with interest in IT GRC audit.

Key Skills

Basic understanding of ISO 27001 and other security frameworks including SOC 2, GDPR and HIPAA, audits, MS Office; good communication and analytical skills.

Preferred

Pursuing CISA, ISO 27001 Foundation, or DISA is a plus.

Experience

Not mandatory; freshers are welcome.

Why Join Us

Hands-on exposure to cybersecurity, compliance, and IS audit under expert guidance.

Position 2:

Information Security Auditor – GRC

Location:

Chennai

Role Summary

Lead and execute IS audits, risk assessments, and compliance reviews within the GRC framework.

Education

Graduate in B.E./B.Tech (CS/IT), B.Sc/M.Sc (IT/CS), or equivalent.

Experience

Upto 2 years in information security, IT audit, or risk/compliance roles.

Key Skills

Strong knowledge of ISO 27001 and other security frameworks including SOC 2, GDPR and HIPAA, ITGC, regulatory frameworks (RBI, SEBI), audit tools, and MS Office.

Certifications

CISA, DISA, ISO 27001 Lead Auditor (preferred).

Why Join Us

Opportunity to lead audits, enhance GRC maturity, and work with senior stakeholders in a dynamic environment.