Ташкент, Мирзо-Улугбекский район, улица Шахрисабз, 30
Conducts independent audits of information security processes and systems to evaluate their effectiveness.
Key Responsibilities:
Developing internal audit plans for information security.
Conducting audits according to ISO 27001, NIST, PCI DSS, and other standards.
Collecting evidence, conducting interviews, and testing controls.
Preparing detailed reports highlighting non-compliances.
Monitoring the implementation of corrective actions.
Requirements:
At least 3 years of experience conducting information security audits.
Knowledge of auditing standards and methodologies.
Certifications such as CISA or ISO 27001 Lead Auditor are a plus.
Audit Methodology: Proficiency in standards and auditing tools.
Objectivity: Ability to perform independent and unbiased assessments.
Analytical Skills: Attention to detail and a systematic approach.
Communication: Reporting skills and ability to present findings to management.
Organization: Audit planning and time management skills.