Paytm Labs

Digital payments, loans, investments, and insurance

Associate Information Technology Audit

Internal Audit & ControlsConfirmed live in the last 24 hours

Full-timeNoida, Uttar Pradesh, IndiaNo salary listedIn-person

About the Job

Requirements

At least 2 years of experience in information security and auditing, with a strong background in cloud security and the banking and IT industries.
Experience performing IT and cloud security audits, validating ITGC and cloud application controls, and maintaining audit documentation.
Hands-on experience with vulnerability management, risk management, physical security, identity and access management, encryption, secure development, incident management, security infrastructure, and security policy for on-premises and cloud environments.
Expertise in third-party risk management, regulatory compliance, and managing IT audit findings in traditional and cloud-based contexts.
Understanding of IT, cloud security, and cybersecurity frameworks and standards.
Proficiency using security assessment tools and technologies, particularly those related to cloud environments.
Bachelor's or Master's degree in Information Technology, Cyber Security, or a related field.

Responsibilities

Conduct IT and cloud security audits across IT General Controls, Information Security Controls, Cloud Security, Network Security, Vulnerability Management, and Vendor Risk Assessments.
Assess compliance with relevant laws, regulations, and organizational policies, including requirements for on-premises and cloud environments.
Develop and enhance information security and cloud security policies and procedures in alignment with industry best practices.
Maintain documentation of audit findings, risk assessments, and security measures for internal and external reporting.
Validate ITGC, cloud security, and application-specific controls, and manage audit documentation including risk assessments, working papers, audit program checklists, and evidence gathering.
Follow up on and ensure closure of non-compliance issues identified during audits.
Manage and oversee third-party risk assessments and audits, ensuring security controls are in place for traditional and cloud-based service providers.
Lead and participate in the development, migration, and implementation of security controls and policies for network and cloud security solutions.
Conduct risk-based security assessments on internal, vendor, and third-party hosted environments, including traditional IT and cloud infrastructure.
Participate in product and vendor selection, contributing to the implementation and integration of new technologies, with an emphasis on cloud security solutions.

Desired Qualifications

Banking-sector experience is preferred.
ISO 27001, CNSS, CCNA, CISA, CISM, or CISSP certification is preferred.
Knowledge of security tools, PCI-DSS, general ITGC controls, compliance testing, cloud risk assessment, GRC, OWASP, MITRE ATT&CK, change management, policies, and procedures.
Proficiency with security and cloud technologies including AWS, Azure, Google Cloud Platform, Palo Alto, Fortinet, Check Point Firewalls, SOAR (Cortex), and Forcepoint.

About Team : The Internal Audit team at Paytm comprises seasoned professionals with diverse skill sets and experience across different verticals like process audits, technology audits and forensics. The team focuses on implementing the approved audit plan, ensuring delivery of qualitative audits and conducting internal / special reviews while leveraging technology & data analytics and gauging key risks across business processes.

About the role: We are seeking an experienced and detail-oriented Information Security and Cloud Security Auditor to join our team. The ideal candidate will have 3-7 years of expertise in data security and privacy control implementation, internal auditing, third-party risk management, cybersecurity governance, and cloud security (banking sector preferred). This role will be responsible for conducting comprehensive IT and cloud security audits, ensuring compliance with regulatory requirements, and enhancing our information security policies and procedures.

Key Responsibilities: Conduct IT and cloud security audits across various domains, including IT General Controls, Information Security Controls, Cloud Security, Network Security, Vulnerability Management, and Vendor Risk Assessments. Assess compliance with relevant laws, regulations, and organizational policies, providing expertise in regulatory requirements specific to both on-premises and cloud environments. Develop and enhance information security and cloud security policies and procedures in alignment with industry best practices. Maintain thorough documentation of audit findings, risk assessments, and security measures for internal and external reporting. Validate ITGC, cloud security, and application-specific controls, and manage audit documentation including risk assessments, working papers, audit program checklists, and evidence gathering. Follow up on and ensure closure of non-compliance issues identified during audits. Manage and oversee third-party risk assessments and audits, ensuring robust security controls are in place for both traditional and cloud-based service providers. Lead and participate in the development, migration, and implementation of security controls and policies for network and cloud security solutions. Conduct risk-based security assessments on internal, vendor, and third-party hosted environments, focusing on both traditional IT and cloud infrastructure. Participate in product and vendor selection processes, contributing to the implementation and integration of new technologies, with a strong emphasis on cloud security solutions.

Experience/ Skills Required: Minimum 2 years of experience in information security and auditing, with a strong background in cloud security, and the banking and IT industries. Proven experience in performing IT and cloud security audits, validating ITGC and cloud application controls, and maintaining audit documentation. Hands-on experience with vulnerability management, risk management, physical security, identity & access management, encryption, secure development, incident management, security infrastructure, and security policy for both on-premises and cloud environments. Expertise in third-party risk management, regulatory compliance, and managing IT audit findings in both traditional and cloud-based contexts. Strong analytical and problem-solving skills. Excellent communication and documentation skills. Ability to manage multiple projects and meet deadlines. Strong understanding of IT, cloud security, and cybersecurity frameworks and standards. Proficiency in using various security assessment tools and technologies, particularly those related to cloud environments. Strong analytical and problem-solving skills. Excellent communication and documentation skills. Ability to manage multiple projects and meet deadlines. Strong understanding of IT, cloud security, and cybersecurity frameworks and standards. Proficiency in using various security assessment tools and technologies, particularly those related to cloud environments.

Qualifications & Certification: Bachelors / Master’s degree in Information Technology, Cyber Security, or a related field. ISO 27001/CNSS/CCNA/CISA/CISM/CISSP Preferred Detailed knowledge of security tools, PCI-DSS, general ITGC controls, compliance testing, cloud risk assessment, GRC, OWASP, MITRE ATT& amp; CK, change management, and policies and procedures. Proficiency in various security and cloud technologies including AWS, Azure, Google Cloud Platform, Palo Alto, Fortinet & Checkpoint Firewalls, SOAR (Cortex), Force scout

Why join us 1. A collaborative output driven program that brings cohesiveness across businesses through technology2. Improve the average revenue per use by increasing the cross-sell opportunities3. A solid 360 feedback from your peer teams on your support of their goals4. Respect, that is earned, not demanded from your peers and manager

Compensation: If you are the right fit, we believe in creating wealth for you. With enviable 500 mn+ registered users, 21 mn+ merchants and depth of data in our ecosystem, we are in a unique position to democratize credit for deserving consumers & merchants – and we are committed to it. India’s largest digital lending story is brewing here. It’s your opportunity to be a part of the story!

Requirements at a Glance

Experience Level: Mid, Senior
Education: Bachelor's, Master's

Benefits

Health & Wellbeing - Your group health benefits are 100% funded by us, and start on your first day.
Travel the World - Even though we are currently working remotely, usually our employees make frequent international business-related trips while working on exciting projects.
Continuous Learning - We're passionate about learning and strive to constantly improve and innovate. We learn from others, our challenges & our successes.
Connection - In this virtual world, we stay connected through events like game nights, movie nights, arts & crafts sessions (like Origami), meditation sessions, and much more.
Autonomy & Flexibility - You get to define how you want to make an impact. We truly believe that great things happen when people are given the trust and freedom to create their own path.
Beautiful Office - Whenever we return back to the office, you’ll get to check out our awesome workspace, complete with pool and ping pong tables, a snack-filled kitchen, and tons of cozy work spaces.

About the Company

Paytm Labs

Digital payments, loans, investments, and insurance

Paytm Labs offers an integrated digital payments and financial services platform in India for individuals and businesses, covering UPI payments, mobile recharges, bill payments, ticket bookings, loans, investments, insurance, metro cards, and more. Users initiate payments or financial actions in the app, which are processed through UPI and payment gateways, with revenue from transaction fees and commissions on financial services. It differentiates itself through a large ecosystem of merchants and users, a wide range of services in one app, and a focus on customer support and trust. Its goal is to make a broad set of financial services easily accessible to mass-market users while growing revenue via payment processing and financial services partnerships at scale.

Company size: 10,001+
Company stage: IPO
Headquarters: Noida, India
Founded: 2014

Recently Posted Jobs

Explore more opportunities at Paytm Labs

See more jobs