Security Specialist - Security Audit & Compliance Management | Thiruvananthapuram

To support information security compliance through evaluation of security controls, assessment of audit requirements and monitoring of regulatory obligations. The role recommends improvements that strengthen governance and control effectiveness.
 

Responsibilities

• Plan, coordinate, and support internal and external security audits across the Bank's technology and business environments.
• Manage audits related to information security frameworks and regulatory requirements including:
  ISO 27001
  PCI-DSS
  SOC Reports
  RBI Guidelines
  SEBI Regulations
  Other applicable regulatory and compliance standards
• Act as the primary point of contact for auditors and audit stakeholders.
• Ensure timely completion of audit activities and closure of audit observations.
• Ensure compliance with information security policies, regulatory requirements, industry standards, and internal governance frameworks.
• Track compliance obligations and monitor adherence across technology and business functions.
• Assess the impact of new and revised regulatory requirements on the Bank's security controls and processes.
• Support implementation of regulatory mandates and compliance initiatives.
• Conduct security control assessments to evaluate the effectiveness of technical, operational, and administrative controls.
• Review security processes and identify control gaps, weaknesses, and improvement opportunities.
• Perform compliance reviews and risk-based assessments across systems, applications, and infrastructure.
• Recommend corrective actions and control enhancements to strengthen security governance.
• Coordinate collection, validation, and submission of audit evidence.
• Maintain comprehensive audit documentation, compliance records, risk registers, and control inventories.
• Ensure proper documentation of audit findings, action plans, and remediation status.
• Establish and maintain repositories for audit and compliance artefacts.
• Track audit findings, compliance observations, and control deficiencies to successful closure.
• Coordinate with technology, business, risk, and vendor teams for remediation of identified gaps.
• Monitor remediation progress against agreed timelines and escalation mechanisms.
• Validate closure evidence and ensure sustainable implementation of corrective actions.
   

Qualifications

Experience: 10 to 15 years 

Qualifications: M.Tech/B.Tech Or Equivalent Bachelors Degree