Security Engineer - Security Audit & Compliance Management| Thane
Posted Updated 5
views
Summary
Oversee security audits and compliance for a bank, ensuring adherence to ISO 27001, SOC 2, PCI-DSS, and regulatory frameworks like NIST and COBIT.
To ensure the organization's security controls, processes, and systems comply with internal policies, industry standards, and regulatory requirements by managing audits and driving continuous compliance improvements.
- Lead and support internal and external audits (e.g., ISO 27001, SOC 2, PCI-DSS).
- Ensure security controls meet compliance obligations.
- Collaborate with teams to collect evidence, close audit findings, and improve security posture.
- Conduct compliance assessments and risk-based control reviews.
- Maintain documentation, compliance dashboards, and audit logs.
- Align security practices with frameworks like NIST, CIS, and COBIT.
- Monitor regulatory changes and update policies accordingly.
- Work with stakeholders to address gaps and enhance audit readiness.
- Promote a culture of compliance across the organization.
- Establish compliance framework including supporting policies, procedures, checklists, control narrations for new regulatory circulars and notification.
- Liase across organization for validating and improving security controls
M.Tech/B.Tech Or Equivalent Bachelors Degree
Min Exp: 5 years
Max Exp: 10 years