IS Audit

Job description

Key Responsibilities: • Review and technically validate VAPT reports from internal/external security teams. • Conduct independent VAPT Process Audit to confirm vulnerability closure and remediation effectiveness. • Map findings to global frameworks including MITRE ATT&CK, CIS Top 18 Controls, OWASP Top 10, CVE, and CWE Top 25. • Ensure compliance with regulatory guidelines such as the RBI Cyber Security Framework (CSF), IT Governance, Risk & Controls (ITGRC), IT Outsourcing, and Digital Payment Security Controls (DPSC) circulars. • Document audit evidence, remediation logs, and prepare vulnerability trend reports. • Coordinate with Information Security, Risk, and IT Operations teams to monitor closure of findings. • Recommend enhancements to strengthen the organizations overall cybersecurity posture