Associate Consultant/ Consultant/ Assistant Manager - Cyber Security Auditor

Job Title: Associate Consultant/ Consultant /Assistant Manager - Cyber Security Auditor

Location: Bangalore

Skills Required:

Seeking a highly skilled Cyber Security Auditor with expertise in auditing cyber security Process, risks and controls. A strong understanding of industry frameworks such as NIST (e.g., NIST CSF, NIST 800-53) and hands-on experience in assessing cybersecurity risks, governance controls, and technical security measures. This role involves validating control effectiveness, performing closure verification/issue validation to strengthen cyber security posture.

Responsibilities:

• Conduct assessments of cyber security risk and controls across network security, application security, vulnerability management, and governance controls.

• Perform closure verification and issue validation for security findings, ensuring remediation aligns with risk reduction objectives.

• Evaluate vulnerability management programs, patch management processes, and threat intelligence integration.

• Review and test governance controls related to cyber security policies.

• Strong understanding of NIST frameworks (CSF, 800-53), ISO 27001, CIS Controls, and regulatory requirements.

• Technical expertise in network security, firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM tools, and endpoint security.

• Hands-on experience in application security, vulnerability management, patch management, and security monitoring.

• Strong knowledge of network protocols (TCP/IP, HTTP, SSL/TLS, DNS, VPN, etc.) and secure configurations.

• Familiarity with cloud security controls (AWS, Azure, GCP) and DevSecOps principles.

• Professional certifications such as CISA, CISSP, CISM, CRISC, CEH, or GIAC certifications (GCIH, GCFA, GPEN) are highly desirable.

• Stay up to date with emerging cyber threats, attack techniques, and regulatory requirements impacting security controls.

Qualification:

• A Bachelor's degree in engineering and approximately 3 -6 years of related work experience; or a master’s or MBA degree in business, computer science, information systems, engineering
• Technical Knowledge of IT Audit Tools
• A strong understanding of industry frameworks such as NIST (e.g., NIST CSF, NIST 800-53)
• Hands-on experience in assessing cybersecurity risks, governance controls, and technical security measures