The Role
Lead and execute cybersecurity compliance audits across frameworks (ISO 27001, NIST, GDPR, HIPAA). Assess controls, review documentation, identify risks and gaps, provide remediation recommendations, manage audit teams, communicate findings to stakeholders, deliver regulatory guidance, and provide client training to improve cybersecurity posture.
Summary Generated by Built In
Job Description:
As a Compliance and Lead Auditor at our cybersecurity company, you will play a crucial role in ensuring our clients' systems and processes adhere to industry standards and regulatory requirements. Your responsibilities will encompass conducting comprehensive audits, assessing compliance levels, and providing strategic guidance to enhance cybersecurity posture.
Key Responsibilities:
- Conduct Audits: Plan, execute, and lead cybersecurity compliance audits for clients across various industries. Evaluate adherence to regulatory frameworks such as ISO 27001, NIST, GDPR, HIPAA, etc.
- Compliance Assessment: Assess clients' systems, policies, and procedures to ensure compliance with relevant cybersecurity standards and regulations. Identify gaps and provide actionable recommendations for improvement.
- Documentation Review: Review and analyze documentation including policies, procedures, risk assessments, and incident response plans to verify compliance and effectiveness.
- Risk Management: Collaborate with clients to identify, evaluate, and prioritize cybersecurity risks. Develop risk mitigation strategies tailored to clients' business objectives and compliance requirements.
- Lead Audit Teams: Manage audit teams during on-site assessments. Coordinate activities, delegate tasks, and ensure audits are conducted efficiently and effectively.
- Client Communication: Serve as the primary point of contact for clients throughout the audit process. Communicate audit findings, risks, and recommendations clearly and effectively to key stakeholders.
- Regulatory Guidance: Stay updated on evolving cybersecurity regulations, standards, and best practices. Provide guidance and recommendations to clients to ensure ongoing compliance and readiness for regulatory changes.
- Continuous Improvement: Drive continuous improvement initiatives within the compliance auditing process. Identify opportunities to streamline procedures, enhance efficiency, and deliver greater value to clients.
- Training and Education: Provide training and awareness sessions to clients' personnel on cybersecurity best practices, compliance requirements, and audit preparedness.
Qualifications:
- Bachelor's degree in Information Technology, Cybersecurity, or a related field.
- Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or equivalent certification required.
- Proven experience in conducting cybersecurity compliance audits, preferably in a consulting or advisory role.
- In-depth knowledge of cybersecurity standards and regulations such as ISO 27001, NIST, GDPR, HIPAA, etc.
- Strong understanding of risk management principles and methodologies.
- Excellent communication and interpersonal skills, with the ability to interact effectively with clients and team members.
- Strong analytical and problem-solving skills, with the ability to identify root causes and develop practical solutions.
- Ability to work independently and as part of a team in a fast-paced, dynamic environment.
- Attention to detail and a commitment to delivering high-quality work.
- Join our team and be at the forefront of ensuring cybersecurity compliance for our clients, safeguarding their sensitive data and critical assets against emerging threats.
Skills Required
- Bachelor's degree in Information Technology, Cybersecurity, or a related field.
- Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or equivalent certification.
- Proven experience in conducting cybersecurity compliance audits.
- Experience in a consulting or advisory role conducting audits.
- In-depth knowledge of cybersecurity standards and regulations (ISO 27001, NIST, GDPR, HIPAA).
- Strong understanding of risk management principles and methodologies.
- Excellent communication and interpersonal skills.
- Strong analytical and problem-solving skills.
- Ability to work independently and as part of a team in a fast-paced environment.
- Attention to detail and commitment to delivering high-quality work.
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Xiarch LLC is a risk, compliance, and cybersecurity firm headquartered in Chicago, with delivery centers in New Delhi and Gurugram. Established in 2008, it educates clients, identifies security risks, and informs intelligent business decisions. Its team brings expertise in cybersecurity services, business management, product development, and cloud-based solutions, supported by global operational capabilities and a focus on precision and quality.
