Senior IT & Cybersecurity Auditor Job in Lahore | Contract

We are seeking an experienced Senior IT & Cybersecurity Auditor to support IT and cybersecurity audit engagements. You will assess technology risks, evaluate security controls, and make sure the organization meets regulatory requirements and cybersecurity frameworks. This is an onsite, contract-based role in Lahore.

Key Responsibilities

• Plan and execute IT and cybersecurity audit engagements.
• Evaluate IT General Controls (ITGC) and cybersecurity controls.
• Assess IAM, PAM, MFA, access governance, and privileged access.
• Review network, endpoint, server, database, and cloud security.
• Assess vulnerability management, patch management, SOC, SIEM, and incident response.
• Evaluate cloud security across Azure, AWS, Microsoft 365, and GCP.
• Conduct technology risk assessments and identify control gaps.
• Assess compliance with regulatory requirements and cybersecurity frameworks.
• Prepare audit reports, working papers, risk assessments, and executive presentations.
• Monitor remediation actions and validate closure of audit observations.

Requirements

• 5 to 7 years of experience in IT audit, cybersecurity audit, information security, or technology risk.
• Bachelor’s degree in Computer Science, IT, Cybersecurity, Information Systems, or a related field.
• Hands-on experience with IT General Controls (ITGC).
• Experience auditing on-premises, cloud, and hybrid environments.
• Understanding of cybersecurity frameworks and regulatory standards: NCA ECC & DCC, SAMA CSF, PDPL, ISO/IEC 27001, NIST CSF, COBIT, CIS Controls, and PCI DSS.

Skills

Technical Skills

• IT audit, cybersecurity audit, and technology risk assessment
• IT General Controls (ITGC)
• IAM, PAM, network security, endpoint security, and cloud security
• SOC, SIEM, vulnerability and patch management, and disaster recovery
• Azure, AWS, Microsoft 365, Active Directory, Microsoft Entra ID, VMware, and GCP
• Compliance frameworks (NCA, SAMA, PDPL, ISO 27001, NIST CSF, COBIT, CIS, PCI DSS)

Soft Skills

• Audit reporting and executive presentation
• Risk assessment and analytical thinking
• Tracking remediation and validating closure of audit findings

Nice to Have

• Certifications such as CISA, CISSP, CISM, CRISC, or ISO/IEC 27001 Lead Auditor.