Cybersecurity Auditor - India
Location: Mumbai/ Pune/ Hyderabad
Title: Cybersecurity Auditor
Position Summary:
The global Governance, Risk andAssurance team is responsible for maintaining compliance with enterprisecybersecurity control frameworks, policies and procedures. The team is part ofthe global Cybersecurity Engineering and Assurance organization at CornerstoneOnDemand.
The Cybersecurity Auditor is a criticalrole in supporting the overall strategy and vision of the CybersecurityEngineering & Assurance team, and reports into the Associate Director of Cybersecurity& Assurance.
In this role, you will be responsible for performing internalaudits, enabling cyber certifications and external audits, managing cyber risk andensuring continued assurance with the company's compliance frameworks.Activities include working with cross-functional teams to improve the maturity andeffectiveness of cybersecurity controls, executing internal audits, keeping policies and operating proceduresup-to-date, responding to customer assessments, and producing metrics,scorecards, reports and dashboards periodically.
Key Responsibilities:
Perform cybersecurity audits and risk assessments in all areas of the organization in line with the global Internal Audit Program's objectives
Document audit procedures, recommend remediation plans and liaise independently with stakeholders to validate implementation
Work with functional owners to ensure control objectives and activities meet compliance standards for effectiveness and assurance evidence
Publish and present timely and high quality audit reports
Partner with leaders across business functions such as Engineering, Cloud Operations, Privacy, Product and Customer Success to implement effective cybersecurity controls
Want more jobs like this?
Get jobs in Hyderabad, India delivered to your inbox every week.
Identify emerging cybersecurity and information technology risks, evaluate internal controls to treat risks, and develop opportunities to continuously uplift control frameworks
Work with Cornerstone's external partners and cross functional teams to schedule appropriate internal audit testing and/or risk assessments.
Perform formal reviews of new technologies, initiatives and strategic projects against the company's cybersecurity requirements
Recommend updates to cybersecurity policies, standards and operating procedures to address new industry practices, requirements and regulations
Illustrate ownership and accountability and ensure operational efficiency
Educational Background:
Degree in Information Technology, Computer Science, Cybersecurity or related fields
CISA, CRISC, CISSP and/or ISO 27001 LA/LI desired
Skills and Experience:
3-6 total years of experience in cybersecurity, compliance, IT audits and/or cyber risk management
Hands-on expertise in industry-standard cybersecurity assurance standards (e.g., SOC 2, ISO 27k, NIST, PCI DSS, etc.), trends and best practices
Experience in auditing general and automated controls, including but not limited to logical security, physical security, change and problem management, data backup, disaster recovery and incident management
Knowledge of security tools, technologies and control best practices for domains such as IAM, encryption, system hardening, anti-malware, data leakage prevention, NIDPS, network security and vulnerability management
Hands-on exposure to auditing and/or securing leading cloud PaaS technologies platforms such as AWS, Google Cloud and Microsoft Azure
Proficient in Word, Excel, PowerPoint and other Microsoft 365 tools
Mature data analysis, documentation, articulation and presentation skills
Ability to communicate effectively with stakeholders across global regions and organizational levels
Ability to work autonomously with flexibility and excellent judgment
Ability to work effectively under pressure to meet deadlines
Ability to solve problems quickly and automate processes
Ability to work cooperatively as part of a team
#LI-Hybrid
Perks and Benefits
Health and Wellness
- Health Insurance
- Health Reimbursement Account
- Dental Insurance
- Vision Insurance
- Life Insurance
- Short-Term Disability
- Long-Term Disability
- FSA
- HSA
- HSA With Employer Contribution
- Pet Insurance
- Mental Health Benefits
Parental Benefits
- Birth Parent or Maternity Leave
- Non-Birth Parent or Paternity Leave
- Fertility Benefits
- Family Support Resources
- Adoption Leave
Work Flexibility
- Flexible Work Hours
- Remote Work Opportunities
- Hybrid Work Opportunities
Office Life and Perks
- Casual Dress
- Snacks
- Company Outings
- On-Site Cafeteria
- Holiday Events
Vacation and Time Off
- Paid Vacation
- Unlimited Paid Time Off
- Paid Holidays
- Personal/Sick Days
- Leave of Absence
- Summer Fridays
Financial and Retirement
- 401(K) With Company Matching
- Stock Purchase Program
- Performance Bonus
- Relocation Assistance
- Financial Counseling
- Profit Sharing
Professional Development
- Tuition Reimbursement
- Promote From Within
- Work Visa Sponsorship
- Leadership Training Program
- Internship Program
- Shadowing Opportunities
- Access to Online Courses
Diversity and Inclusion
- Employee Resource Groups (ERG)
- Unconscious Bias Training
- Diversity, Equity, and Inclusion Program