Position Title : Lead Auditor

Position Summary :

We are seeking a highly motivated and detail-oriented Technology Quality Assurance (TQA) & Information Security Compliance Specialist to drive quality governance, process compliance, and information security initiatives across the organization. The ideal candidate should possess strong experience in the Software Development Life Cycle (SDLC), quality assurance frameworks, internal auditing, and ISO 27001 : 2022 compliance. The role requires close collaboration with Engineering, Product, PMO, and Business teams to ensure adherence to quality and security standards.

Key Responsibilities :

- Ensure compliance with organizational quality, governance, and information security standards.

- Conduct internal process and compliance audits across technology and business functions.

- Support implementation, monitoring, and continual improvement of the Information Security Management System (ISMS).

- Review SDLC processes and ensure adherence to established quality practices and controls.

- Identify process gaps, compliance risks, and improvement opportunities.

- Track audit findings and drive closure of corrective and preventive actions (CAPA).

- Facilitate quality reviews, process assessments, and compliance reporting.

- Work with stakeholders to enhance process maturity and operational excellence.

- Support external audits, certification audits, and customer compliance assessments.

- Promote awareness of quality and information security standards across teams.

Education & Certifications :

- Bachelor's degree in Engineering, Computer Science, Information Technology, or a related discipline.

- PMP (Project Management Professional) and/or Certified Scrum Master (CSM) certification.

Experience :

- Minimum 5+ years of overall IT/Technology experience.

- Demonstrable experience working across the Software Development Life Cycle (SDLC), including Requirements Gathering, Design, Development, Testing, Deployment, and Maintenance.

- Minimum 2 years of hands-on experience in Technology Quality Assurance (TQA).

- Experience conducting Internal Audits within technology or information security environments.

- Practical experience implementing and auditing controls aligned with ISO 27001 : 2022 standards.

- Experience in preparing audit reports, identifying non-conformities, and driving corrective actions.

Technical & Functional Skills :

- Strong understanding of Quality Management Systems (QMS).

- Knowledge of Information Security Management Systems (ISMS).

- Familiarity with risk assessment, compliance monitoring, and process governance.

- Strong documentation, analytical, and stakeholder management skills.

- Ability to work effectively across cross-functional teams.

Certifications :

- ISO 27001 : 2022 Internal Auditor or Lead Auditor Certification (any one mandatory).

- ITIL Foundation Certification.

- Lean Six Sigma Green Belt or equivalent quality certification.

Project Experience :

- Experience in Agile, Scrum, DevOps, or hybrid project delivery environments.

- Exposure to CMMI, SOC 2, ISO 9001, or other compliance frameworks.

- Experience supporting external certification audits.

- Experience with software quality metrics, process maturity assessments, and governance reporting.

- Exposure to cloud security and compliance standards.

Additional Skills :

- Strong presentation and facilitation skills.

- Experience working with enterprise PMO or governance teams.

- Knowledge of regulatory compliance requirements and data protection frameworks.

- Ability to drive continuous improvement initiatives independently.

Screening Criteria (Mandatory) :

A candidate will be considered only if they satisfy the following :

- Proven SDLC experience throughout their career.

- PMP and/or Scrum Master certification.

- Minimum 2 years of Technology Quality Assurance (TQA) experience.

- Internal Audit experience in Technology/Information Security domain.

- Hands-on exposure to ISO 27001 : 2022 standards and controls.

- Strong audit reporting, compliance, and governance experience.

Preferred Profile :

Candidates from software product companies, engineering services organizations, or technology-driven enterprises with a strong focus on quality, compliance, and information security governance will be highly preferred.