SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Paytm's Internal Audit team is seeking an experienced Information Security and Cloud Security Auditor to join a team of seasoned professionals working across process audits, technology audits, and forensics. The team implements approved audit plans, delivers qualitative audits, and conducts internal and special reviews while leveraging technology, data analytics, and risk assessment across business processes.
In this role, you will conduct comprehensive IT and cloud security audits across multiple domains including IT General Controls, Information Security Controls, Cloud Security, Network Security, Vulnerability Management, and Vendor Risk Assessments. You will assess compliance with relevant laws, regulations, and organizational policies, with expertise in regulatory requirements for both on-premises and cloud environments. Key responsibilities include developing and enhancing information security and cloud security policies aligned with industry best practices, maintaining thorough documentation of audit findings and risk assessments, validating ITGC and cloud-specific controls, managing audit documentation including working papers and evidence gathering, and ensuring closure of non-compliance issues.
You will manage and oversee third-party risk assessments and audits, ensuring robust security controls for both traditional and cloud-based service providers. You will lead and participate in the development, migration, and implementation of security controls and policies for network and cloud security solutions, conduct risk-based security assessments on internal, vendor, and third-party hosted environments, and participate in product and vendor selection processes with emphasis on cloud security solutions.
Paytm operates with 500+ million registered users and 21+ million merchants, positioning itself as India's largest digital lending platform. This is an opportunity to contribute to a high-growth fintech ecosystem while working on critical security and compliance infrastructure.
REQUIREMENTS:
- Minimum 7 years of experience in information security and auditing, with strong background in cloud security and banking/IT industries
- Proven experience performing IT and cloud security audits, validating ITGC and cloud application controls, and maintaining audit documentation
- Hands-on experience with vulnerability management, risk management, physical security, identity & access management, encryption, secure development, incident management, security infrastructure, and security policy for both on-premises and cloud environments
- Expertise in third-party risk management, regulatory compliance, and managing IT audit findings in traditional and cloud-based contexts
- Strong analytical and problem-solving skills
- Excellent communication and documentation skills
- Ability to manage multiple projects and meet deadlines
- Strong understanding of IT, cloud security, and cybersecurity frameworks and standards
- Proficiency in security assessment tools and technologies, particularly cloud-related tools
- Bachelor's or Master's degree in Information Technology, Cyber Security, or related field
- Preferred certifications: ISO 27001, CNSS, CCNA, CISA, CISM, CISSP
- Detailed knowledge of security tools, PCI-DSS, general ITGC controls, compliance testing, cloud risk assessment, GRC, OWASP, MITRE ATT&CK, change management, and policies/procedures
- Proficiency in security and cloud technologies including AWS, Azure, Google Cloud Platform, Palo Alto, Fortinet & Checkpoint Firewalls, SOAR (Cortex), Force Scout
