Information Security Auditor

Job Title: Information Security Auditor

Experience: 4 to 6 years

Location: Bengaluru.

The Information Security Auditor ensures Nextivas compliance with global security and privacy regulations by conducting internal audits, supporting external audits, and driving remediation of security and privacy control gaps. This role partners closely with system owners, infrastructure, and product teams to strengthen security controls, policies, and compliance posture across the organization InfoSec Audit

Key Responsibilities

• Conduct internal security and privacy audits and assess compliance with industry frameworks
• Document audit findings, identify risks, and lead remediation efforts
• Support external audits by coordinating evidence collection and audit management
• Review and update security and privacy policies
• Collaborate with cross-functional teams to monitor and improve compliance

We value:

Clarity on the role

1. Internal audits Ownership (ISO 27001, SOC 2, PCI, HIPAA, GDPR)
2. Evidence collection & audit readiness
3. Working closely with IT / Dev / Cloud teams
4. Maturing the GRC program (not just checkbox compliance)

You get Nextivas environment

1. Multi-framework, multi-region audits
2. Small but high-impact security team
3. Practical, business-friendly security mindset