11+ IT security audit Jobs in Pune | IT security audit Job openings in Pune

Position: IT Auditor

Experience: 4-12 Years

Location: Pune

Key Skills Required:

CISA, CISSP, CISM, IT Audit, Technology Audit, IT Infrastructure Audit, Application Security Audit, Information Security Audit, Cyber Security Audit, Cloud Security, Ethical Hacker

Additional key words: Vulnerability assessment, Penetration Testing, ITGC testing, Cloud Computing,

IT AUDITOR is responsible to plan and perform the audit assignment starting from audit announcement, audit planning, field work, audit quality reviews, pre-closing / closing meetings with the respective Directors / Head of the Departments including writing of the audit report and its finalization as well as follow up of the audit actions. Additionally IT AUDITOR will also be responsible to:
•    Evaluate IT systems, processes and projects in place;
•    Determine risks to the Group’s information assets, and help identify methods to minimize those risks;
•    Ensure information management processes are in compliance with IT-specific laws, policies and standards;
•    Determine inefficiencies in IT systems, IT projects and associated management processes and
•    Consult in IT projects, new initiatives and organizational frameworks.

Description

Audit Planning

1)    Perform audits at Volkswagen Group entities. and other concerned Volkswagen Group Companies with focus on IT processes keeping the associated business risks in mind.
2)    Participate in the preparation of audit objective & scope document along with audit schedule based on the audit objective and timeline specified by Head of IT Audit India Hub.
3)    Participate in the preparation of work program

Audit Process

1)     Prepare and conduct preparatory interviews with the Directors and Heads of the audited departments to identify the processes to be assessed during the audit.
2)     Request and collect relevant audit data for analysis from respective business areas.
3)     Prepare audit matrix on periodic basis to record the audit field work and update the progress of the audit to IT Audit Manager and the Head of IT Audit Hub India.
4)    Define actions including relevant controls to mitigate the business risks identified based on the evidences provided during the audit.
5)    Organize and conduct pre-closing meetings with business areas to agree upon audit observations and relevant actions.
6)    Prepare and conduct closing meetings with the Directors / Heads of the Department for audited division to agree upon the audit observations, risks and proposed actions.
7)    Prepare the draft audit report and submit the same to the  IT Audit Manager and the Head of IT Audit India Hub for review.
8)    Ensure that adequate documentation is prepared for the audit assignment. Peer review changes are done before release of the final audit report to the business area.
9)    Contact business area to review the progress of the implementation of audit actions defined in the final audit report. Based on the review, write the status of the follow up and submit the same for upload in RIAS.
10)    Obtain necessary certifications / qualifications to support the job requirements by attending relevant trainings
11)    Support the conduction of unscheduled audits/special investigations and audits from the anti-corruption system.
12)    Relevant knowledge is shared among the team members.
13)    Consult in IT projects, new initiatives and organizational frameworks.
14)    Ensure information management processes are in compliance with IT-specific laws, policies and standards.
15)    Determine risks to the Group’s information assets, and help identify methods to minimize those risks.
16)    Evaluate IT systems, processes and projects in place.
17)    Determine inefficiencies in IT systems, IT projects and associated management processes.

Technical Skills – Must have  

 Lead the design and development of AI-driven test automation frameworks and solutions.

 Collaborate with stakeholders (e.g., product managers, developers, data scientists) to understand testing requirements and identify areas where AI automation can be effectively implemented.

 Develop and implement test automation strategies for AI-based systems, encompassing various aspects like data generation, model testing, and performance evaluation.

 Evaluate and select appropriate tools and technologies for AI test automation, including AI frameworks, testing tools, and automation platforms.

 Define and implement best practices for AI test automation, covering areas like code standards, test case design, test data management, and ethical considerations.

 Lead and mentor a team of test automation engineers in designing, developing, and executing AI test automation solutions.

 Collaborate with development teams to ensure the testability of AI models and systems, providing guidance and feedback throughout the development lifecycle.

 Analyze test results and identify areas for improvement in the AI automation process, continuously optimizing testing effectiveness and efficiency.

 Stay up-to-date with the latest advancements and trends in AI and automation technologies, actively adapting and implementing new knowledge to enhance testing capabilities.

 Knowledge in Generative AI and Conversational AI for implementation in test automation strategies is highly desirable.

 Proficiency in programming languages commonly used in AI, such as Python, Java, or R.

 Knowledge on AI frameworks and libraries, such as TensorFlow, PyTorch, or scikit-learn.

 Familiarity with testing methodologies and practices, including Agile and DevOps.

 Working experience on Python/Java and Selenium also knowledge in prompt engineering.

Roles & Responsibilities:

• Collaborate closely with clients to understand their requirements, goals, and any gaps.
• Lead the planning, prioritization, design, development, and deployment of projects.
• Possesses in-depth knowledge and expertise in Workday Integrations and Workday Extend Platform.
• Support existing Integrations and Extend apps by resolving issues and enhancing to add new functionalities.
• Act as a subject matter expert for Workday Extend and provide guidance to clients and colleagues.
• Stay updated with the latest industry trends and developments using Integrations and Extend.
• Collaborate with sales and business development teams to identify new opportunities and contribute to proposal development.
• Utilize your business knowledge and expertise to identify opportunities for technical improvements.
• Work with colleagues across various domains to deliver results and take ownership of both individual and team outcomes.
• Recognize and embody our purpose and values, applying them in your projects and client interactions.
• Foster relationships and communicate effectively to positively influence peers and stakeholders.

Qualification & Experience:

• At least 3 years of experience in Workday Integrations and 2 apps development using Extend is required.
• Passion towards technical development and critical ability to understand current code and resolve issues. 
• Deep understanding of Workday Extend platform, including building custom applications and integrations.
• Strong understanding of REST and SOAP APIs, with experience in integrating Workday with third-party systems. 
• Good knowledge of Integrations and Extend security framework.
• Ability to work with HR, finance, and IT teams to align technical solutions with business needs.
• Strong professional communication skills, both written and verbal.
• Ability to work effectively in a team-oriented environment.
• Proven ability to establish relationships with stakeholders and internal teams.
• Excellent attention to detail and follow-through.

PortOne is re−imagining payments in Korea and other international markets. We are a Series B funded startup backed by prominent VC firms Softbank and Hanwa Capital

https://portone.io/global/en

PortOne provides a unified API for merchants to integrate with and manage all of the payment options available in Korea and SEA Markets - Thailand, Singapore, Indonesia etc. It's currently used by 2000+ companies and processing multi-billion dollars in annualized volume. We are building a team to take this product to international markets, and looking for engineers with a passion for fintech and digital payments.

Culture and Values at PortOne

• You will be joining a team that stands for Making a difference.
• You will be joining a culture that identifies more with Sports Teams rather than a 9 to 5 workplace.
• This will be remote role that allows you flexibility to save time on commute
• Your will have peers who are/have
• Highly Self Driven with A sense of purpose
• High Energy Levels - Building stuff is your sport
• Ownership - Solve customer problems end to end - Customer is your Boss
• Hunger to learn - Highly motivated to keep developing new tech skill sets

Who you are ?

* You are an athlete and Devops/DevSecOps is your sport.

* Your passion drives you to learn and build stuff and not because your manager tells you to.

* Your work ethic is that of an athlete preparing for your next marathon. Your sport drives you and you like being in the zone.

* You are NOT a clockwatcher renting out your time, and NOT have an attitude of "I will do only what is asked for"

* Enjoys solving problems and delight users both internally and externally

* Take pride in working on projects to successful completion involving a wide variety of technologies and systems

* Posses strong & effective communication skills and the ability to present complex ideas in a clear & concise way

* Responsible, self-directed, forward thinker, and operates with focus, discipline and minimal supervision

* A team player with a strong work ethic

Experience

* 2+ year of experience working as a Devops/DevSecOps Engineer

* BE in Computer Science or equivalent combination of technical education and work experience

* Must have actively managed infrastructure components & devops for high quality and high scale products

* Proficient knowledge and experience on infra concepts - Networking/Load Balancing/High Availability

* Experience on designing and configuring infra in cloud service providers - AWS / GCP / AZURE

* Knowledge on Secure Infrastructure practices and designs

* Experience with DevOps, DevSecOps, Release Engineering, and Automation

* Experience with Agile development incorporating TDD / CI / CD practices

Hands on Skills

* Proficient in atleast one high level Programming Language: Go / Java / C

* Proficient in scripting - bash scripting etc - to build/glue together devops/datapipeline workflows

* Proficient in Cloud Services - AWS / GCP / AZURE

* Hands on experience on CI/CD & relevant tools - Jenkins / Travis / Gitops / SonarQube / JUnit / Mock frameworks

* Hands on experience on Kubenetes ecosystem & container based deployments - Kubernetes / Docker / Helm Charts / Vault / Packer / lstio / Flyway

* Hands on experience on Infra as code frameworks - Terraform / Crossplane / Ansible

* Version Control & Code Quality: Git / Github / Bitbucket / SonarQube

* Experience on Monitoring Tools: Elasticsearch / Logstash / Kibana / Prometheus / Grafana / Datadog / Nagios

* Experience with RDBMS Databases & Caching services: Postgres / MySql / Redis / CDN

* Experience with Data Pipelines/Worflow tools: Airflow / Kafka / Flink / Pub-Sub

* DevSecOps - Cloud Security Assessment, Best Practices & Automation

* DevSecOps - Vulnerabiltiy Assessments/Penetration Testing for Web, Network and Mobile applications

* Preferrable to have Devops/Infra Experience for products in Payments/Fintech domain - Payment Gateways/Bank integrations etc

What will you do ?

Devops

* Provisioning the infrastructure using Crossplane/Terraform/Cloudformation scripts.

* Creating and Managing the AWS EC2, RDS, EKS, S3, VPC, KMS and IAM services, EKS clusters & RDS Databases.

* Monitor the infra to prevent outages/downtimes and honor our infra SLAs

* Deploy and manage new infra components.

* Update and Migrate the clusters and services.

* Reducing the cloud cost by enabling/scheduling for less utilized instances.

* Collaborate with stakeholders across the organization such as experts in - product, design, engineering

* Uphold best practices in Devops/DevSecOps and Infra management with attention to security best practices

DevSecOps

* Cloud Security Assessment & Automation

* Modify existing infra to adhere to security best practices

* Perform Threat Modelling of Web/Mobile applications

* Integrate security testing tools (SAST, DAST) in to CI/CD pipelines

* Incident management and remediation - Monitoring security incidents, recovery from and remediation of the issues

* Perform frequent Vulnerabiltiy Assessments/Penetration Testing for Web, Network and Mobile applications

* Ensure the environment is compliant to CIS, NIST, PCI etc.

Here are examples of apps/features you will be supporting as a Devops/DevSecOps Engineer

* Intuitive, easy-to-use APIs for payment process.

* Integrations with local payment gateways in international markets.

* Dashboard to manage gateways and transactions.

* Analytics platform to provide insights

Job Description:      

• Extensive experience in Appian BPM application development
• Knowledge of Appian architecture and its objects best practices
• Participate in analysis, design, and new development of Appian based applications
• Team leadership and provide technical leadership to Scrum teams
• Must be able to multi-task, work in a fast-paced environment and ability to resolve problems faced by team
• Build applications: interfaces, process flows, expressions, data types, sites, integrations,
• Proficient with SQL queries and with accessing data present in DB tables and views
• Experience in Analysis, Designing process models, Records, Reports, SAIL, forms, gateways, smart services, integration services and web services
• Experience working with different Appian Object types, query rules, constant rules and expression rules

• At least 6 years of experience in Implementing BPM solutions using Appian 19.x or higher
• Over 8 years in Implementing IT solutions using BPM or integration technologies
• Certification Mandatory- L1 and L2 a
• Experience in Scrum/Agile methodologies with Enterprise level application development projects
• Good understanding of database concepts and strong working knowledge any one of the major databases e g Oracle SQL Server MySQL

• Appian BPM application development on version 19.x or higher
• Experience of integrations using web services e g XML REST WSDL SOAP API JDBC JMS
• Good leadership skills and the ability to lead a team of software engineers technically
• Experience working in Agile Scrum teams
• Good Communication skills

Experience: more than 2 years
Job Location: Pune

Key aspects of this role:
• Maintain, update, and enhance ITSM environment including Incident, Request,
Problem, Change and Knowledge Management, Service Catalog, Service Portals,
SLAs, Discovery, and Integrations
• Participate in the implementation and configuration of other ServiceNow products
outside of ITSM to increase the adoption of the ServiceNow platform.
• Responsible for performing daily administration, issue resolution, and
troubleshooting of the ServiceNow platform.
Monitor health, usage, and overall compliance of ServiceNow and its applications.
To be the right fit, you will need:
• Minimum of 2 years of demonstrated experience in ServiceNow development and
configuration.
• Proficient in developing, integrating and maintaining applications using ServiceNow
Platform technology and tools.
• Understanding of and experience working with IT Service Management processes
(Incident, Problem, Change, Release, SLM, Service Catalog), PPM/ITBM
• Understanding of IT and business requirements with ability to develop, test, deploy
improvements, and update Manage and administer lists, filters, forms, platform
interfaces (to other data sources) and the data within tables, import sets and the
CMDB.
• Preferably certified in ServiceNow

We are looking for an experienced Senior Java Developer to join our dynamic development team. You will be responsible for designing, developing, and deploying scalable, cloud-native micro-services using Java, Spring Boot, and AWS. The ideal candidate is passionate about clean code, solid architecture, and robust automation with a strong understanding of cloud-native development, testing, and event-driven systems.

Key Responsibilities:

• Design and develop robust backend solutions using Java 11+/17 and Spring Boot.
• Build, test, and maintain scalable microservices in a cloud environment (AWS).
• Work with Kafka or other messaging systems for event-driven architecture.
• Write clean, maintainable code with high test coverage using.

Location: Aundh, Pune

Experience: 6+ years

Job Type: Full-Time

Work Mode: Onsite

Industry: FinTech / Healthcare / E-commerce