Back
Paytm logo

IT Audit

Paytm · Posted Oct 21

Mobile payments, digital wallets, banking solutions, and financial services

Noida, Uttar PradeshFull-timeOnsiteSenior Level7+ years₹20.0L–₹35.0L yearly<25 applicants
FinTechFinancial ServicesPaymentsMobile PaymentsPublic Company
Be an early applicantFull time

Get a personal compatibility score

Add a resume for personal matches

About the role

The Internal Audit team at Paytm comprises professionals across process audits, technology audits, and forensics, and focuses on delivering the approved audit plan, qualitative audits, and internal/special reviews using technology and data analytics to assess business-process risks. The role is for an Information Security and Cloud Security Auditor who will conduct comprehensive IT and cloud security audits, assess regulatory compliance, and enhance information security policies and procedures across on-premises and cloud environments.

What you will do

  • Conduct IT and cloud security audits across various domains, including IT General Controls, Information Security Controls, Cloud Security, Network Security, Vulnerability Management, and Vendor Risk Assessments.
  • Assess compliance with relevant laws, regulations, and organizational policies, providing expertise in regulatory requirements specific to both on-premises and cloud environments.
  • Develop and enhance information security and cloud security policies and procedures in alignment with industry best practices.
  • Maintain thorough documentation of audit findings, risk assessments, and security measures for internal and external reporting.
  • Validate ITGC, cloud security, and application-specific controls, and manage audit documentation including risk assessments, working papers, audit program checklists, and evidence gathering.
  • Follow up on and ensure closure of non-compliance issues identified during audits.
  • Manage and oversee third-party risk assessments and audits, ensuring robust security controls are in place for both traditional and cloud-based service providers.
  • Lead and participate in the development, migration, and implementation of security controls and policies for network and cloud security solutions.
  • Conduct risk-based security assessments on internal, vendor, and third-party hosted environments, focusing on both traditional IT and cloud infrastructure.
  • Participate in product and vendor selection processes, contributing to the implementation and integration of new technologies, with a strong emphasis on cloud security solutions.

Skills used in this role

ISO 27001CNSSCCNACISACISMCISSPPCI DSSITGCGRCOWASPMITRE ATT&CKAWSAzureGoogle CloudPalo AltoFortinetCheck PointSOARCortexForescoutCommunicationProblem SolvingDocumentationAnalytical

What the employer is looking for

  • Minimum 7 years of experience in information security and auditing, with a strong background in cloud security, and the banking and IT industries.
  • Proven experience in performing IT and cloud security audits, validating ITGC and cloud application controls, and maintaining audit documentation.
  • Hands-on experience with vulnerability management, risk management, physical security, identity & access management, encryption, secure development, incident management, security infrastructure, and security policy for both on-premises and cloud environments.
  • Expertise in third-party risk management, regulatory compliance, and managing IT audit findings in both traditional and cloud-based contexts.
  • Strong analytical and problem-solving skills.
  • Excellent communication and documentation skills.
  • Ability to manage multiple projects and meet deadlines.
  • Strong understanding of IT, cloud security, and cybersecurity frameworks and standards.
  • Proficiency in using various security assessment tools and technologies, particularly those related to cloud environments.
  • Bachelor's / Master’s degree in Information Technology, Cyber Security, or a related field.
  • ISO 27001/CNSS/CCNA/CISA/CISM/CISSP Preferred
  • Detailed knowledge of security tools, PCI-DSS, general ITGC controls, compliance testing, cloud risk assessment, GRC, OWASP, MITRE ATT&CK, change management, and policies and procedures.
  • Proficiency in various security and cloud technologies including AWS, Azure, Google Cloud Platform, Palo Alto, Fortinet & Checkpoint Firewalls, SOAR (Cortex), Force scout

Benefits and support

  • Compensation and benefits are detailed in the job posting

About Paytm

Paytm is India's leading financial services company offering full-stack payment solutions, digital wallets, QR codes, and financial services to consumers and merchants. The platform provides comprehensive digital inclusion via UPI payments, banking services distribution, merchant devices, and lending solutions. Operating under its parent firm One97 Communications, Paytm has scaled its operations into a robust profitability-driven ecosystem.

Industry
FinTech
Company size
10001+ employees
Founded
2010
Location
Noida, Uttar Pradesh, India
Funding stage
Public Company

Funding

Public Company · $4.91B raised

Ant GroupAlibaba GroupSoftBank Vision FundBerkshire HathawayT. Rowe Price
  • 2023-08-28Late Stage$246.34M
  • 2020-11-20Angel$1.26M
  • 2019-12-06Series H$673M
  • 2018-08-27Series G$300M

Leadership

VS
Vijay Shekhar Sharma

Founder & Chief Executive Officer

DR
Deependra Rathore

Chief Technology Officer

Apply