IT Audit & Compliance Specialist

Description :

We are looking for an experienced IT Audit & Compliance Specialist to manage and oversee compliance, audit coordination, and control assurance activities across multiple IT service towers. The role requires strong understanding of ISO 27001:2013 standards, exceptional stakeholder management skills, and the ability to lead audit cycles with precision and consistency.

Key Responsibilities :

- Serve as the single point of contact for all compliance, control, and audit-related activities across in-scope IT services.

- Coordinate and manage internal and external audit responses, ensuring alignment with Cognizants service delivery and contractual obligations.

- Facilitate the collection, validation, and submission of audit documentation, evidence, and artifacts from various service towers and stakeholder groups.

- Lead and support half-yearly internal audits and annual external audits, driving timely execution, tracking findings, and ensuring prompt closure.

- Ensure adherence to ISO 27001:2013 standards, including conducting risk assessments, validating security controls, and supporting continuous improvement initiatives.

- Work closely with client teams and internal service towers to address audit findings and implement corrective/preventive action plans.

- Maintain and update audit logs, compliance trackers, dashboards, and governance reports for clear oversight and transparency.

- Support audit readiness activities and promote a culture of compliance across delivery units.

Required Skills & Qualifications :

- Strong knowledge of information security controls, risk management methodologies, and regulatory compliance requirements.

- Excellent organizational, communication, and stakeholder management skills to coordinate cross-functional audit activities.

- Ability to understand, interpret, and translate audit requirements into actionable tasks, processes, and documentation.

- Hands-on experience with audit management tools, ticketing systems, and documentation or workflow platforms (e.g., Confluence, JIRA, ServiceNow).

Preferred Qualifications :

- Experience in a managed services environment or multi-tower IT service delivery structure.

- Working knowledge of additional compliance frameworks such as GDPR, SOC 2, or similar regulatory standards.