Grand Mark - Information Security Auditor

Job Description: The Junior Information Security Auditor will be responsible for supporting the information security team in ensuring compliance with various security standards and frameworks. The role involves conducting internal audits, interacting with clients, and developing templates and checklists for audits and security processes. The ideal candidate should have a foundational understanding of information security principles and be eager to grow in this field.

Key Responsibilities:

Audit or Gap Analysis Templates for ISO27001, NIST, SSAE16:

- Develop and maintain audit or gap analysis templates for various security standards, including ISO27001, NIST, and SSAE16.

- Assist in identifying gaps in security controls and provide recommendations for remediation.

Audit Report Templates:

- Create and update audit report templates to ensure comprehensive and clear documentation of audit findings.

- Ensure audit reports meet organizational and client requirements.

Security Operational Process, Checklist, etc. (SOP or Templates):

- Develop and maintain security operational processes and checklists.

- Ensure that standard operating procedures (SOPs) are in line with best practices and regulatory requirements.

Mapping International Best Practices:

- Research and map international best practices for information security.

- Assist in aligning organizational security practices with international standards and frameworks.

Internal Audits:

- Conduct internal audits to assess compliance with security policies and procedures.

- Document findings and assist in developing action plans to address identified issues.

Client Interactions:

- Engage with clients to understand their security requirements and provide support during audits.

- Communicate audit findings and recommendations to clients in a clear and professional manner.

Qualifications:

- Bachelor's degree in Information Security, Computer Science, or a related field.

- Basic understanding of information security principles and practices.

- Familiarity with security standards such as ISO27001, NIST, and SSAE16.

- Strong analytical and problem-solving skills.

- Excellent written and verbal communication skills.

- Ability to work collaboratively in a team environment.

- Attention to detail and strong organizational skills.

Preferred Qualifications:

- Relevant certifications such as CompTIA Security+, ISO27001 Lead Auditor, or similar.

- Experience in conducting audits or working in an information security role.

- Knowledge of regulatory requirements and best practices in information security.

Benefits:

- Competitive salary and benefits package.

- Opportunities for professional growth and development.

- Collaborative and innovative work environment.

- Flexible work arrangements.

- Equal Opportunity Employer: We are an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.