Security Specialist - Security Audit & Compliance Management | Thiruvananthapuram

To support information security compliance through evaluation of security controls, assessment of audit requirements and monitoring of regulatory obligations. The role recommends improvements that strengthen governance and control effectiveness.

• Plan, coordinate, and support internal and external security audits across the Bank's technology and business environments.
• Manage audits related to information security frameworks and regulatory requirements including:
  ISO 27001
  PCI-DSS
  SOC Reports
  RBI Guidelines
  SEBI Regulations
  Other applicable regulatory and compliance standards
• Act as the primary point of contact for auditors and audit stakeholders.
• Ensure timely completion of audit activities and closure of audit observations.
• Ensure compliance with information security policies, regulatory requirements, industry standards, and internal governance frameworks.
• Track compliance obligations and monitor adherence across technology and business functions.
• Assess the impact of new and revised regulatory requirements on the Bank's security controls and processes.
• Support implementation of regulatory mandates and compliance initiatives.
• Conduct security control assessments to evaluate the effectiveness of technical, operational, and administrative controls.
• Review security processes and identify control gaps, weaknesses, and improvement opportunities.
• Perform compliance reviews and risk-based assessments across systems, applications, and infrastructure.
• Recommend corrective actions and control enhancements to strengthen security governance.
• Coordinate collection, validation, and submission of audit evidence.
• Maintain comprehensive audit documentation, compliance records, risk registers, and control inventories.
• Ensure proper documentation of audit findings, action plans, and remediation status.
• Establish and maintain repositories for audit and compliance artefacts.
• Track audit findings, compliance observations, and control deficiencies to successful closure.
• Coordinate with technology, business, risk, and vendor teams for remediation of identified gaps.
• Monitor remediation progress against agreed timelines and escalation mechanisms.
• Validate closure evidence and ensure sustainable implementation of corrective actions.
  

Experience: 10 to 15 years

Qualifications: M.Tech/B.Tech Or Equivalent Bachelors Degree