IS Audit

Job description

**Key Responsibilities:** - Review and technically validate **VAPT reports** from internal/external security teams. - Conduct **independent VAPT Process Audit** to confirm vulnerability closure and remediation effectiveness. - Map findings to global frameworks including **MITRE ATT&CK**, **CIS Top 18 Controls**, **OWASP Top 10**, **CVE**, and **CWE Top 25**. - Ensure compliance with regulatory guidelines such as the **RBI Cyber Security Framework (CSF)**, **IT Governance, Risk & Controls (ITGRC)**, **IT Outsourcing**, and **Digital Payment Security Controls (DPSC)** circulars. - Document audit evidence, remediation logs, and prepare vulnerability trend reports. - Coordinate with Information Security, Risk, and IT Operations teams to monitor closure of findings. - Recommend enhancements to strengthen the organizations overall cybersecurity posture