Description

You will execute audits to ensure compliance with ISO 27000 series standards and Sarbanes-Oxley Act (SOX) regulations.

Responsibilities

• Conduct audits of systems, processes, and controls to verify compliance with ISO 27000 and SOX.
• Assess information security policies and documentation to identify gaps or improvement areas.
• Perform risk assessments to identify security vulnerabilities and recommend mitigation strategies.
• Evaluate security control effectiveness and recommend necessary enhancements.
• Prepare detailed audit reports including findings, observations, and corrective action recommendations.

Required Skills

• 5+ years of experience conducting audits and assessments of information security controls.
• Strong understanding of ISO 27001, ISO 27002, and SOX frameworks.
• CISA or CISM certification.
• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Familiarity with auditing tools, techniques, and methodologies.
• Ability to communicate complex technical concepts to non-technical stakeholders.
• Analytical and problem-solving skills for addressing security risks.

Key Skills

Education

Bachelor's degree