Auditor, IT Security (Gurugram)

Job Description Position Title: Auditor IT Security (Staff Accountant / Staff Consultant) Location: Category: Staff Level (including Analysts and Trainees) Industry: Chartered Professional Accountants / IT Security & Audit About the Opportunity We are a Canada-based Chartered Professional Accounting and Advisory firm, expanding our operations globally. We are seeking talented professionals in India to join our team. This is an exciting opportunity to work with a rapid-growing firm, gain exposure to international clients, and develop expertise across multiple areas of IT security, audit, and advisory. Key Responsibilities IT Security Assessment - Analyze and assess client IT infrastructure to evaluate the design and operational effectiveness of controls. - Conduct or support risk assessments to identify information security vulnerabilities. - Perform vulnerability assessments and penetration testing using tools such as Kali, Nessus, Parrot, etc. - Evaluate antivirus programs, firewalls, password protection, and network security controls. - Inspect networks and hardware for security gaps and recommend remediation measures. - Provide expert input on security architecture concepts and requirements. - Draft IT security policies, procedures, and guidelines for clients. - Deliver security awareness training sessions as required. IT Audit - Execute IT audits in the areas of infrastructure, processes, applications, operations, security, and emerging technologies. - Apply IT audit and control frameworks (COBIT, NIST, ISO 27001, PCI, SOC1, SOC2, CSAE 3416, etc.). - Prepare risk and control matrices, perform walkthroughs, and document processes and controls. - Identify compliance gaps, process inefficiencies, and operational issues. - Develop clear and comprehensive audit work papers, memos, and reports. - Conduct assurance engagements including planning, scoping, risk assessments, and audit program execution. - Finalize audit files and reports independently with minimal s .