Senior Information Security Auditor
About the role
HLB Lanka Business Advisory is hiring a Senior Information Security Auditor to join their Information Security and IT GRC team in Colombo, Sri Lanka. The role involves leading or co-leading ITGC audits, conducting information security audits and readiness assessments based on standards such as ISO 27001, ISO 27701, NIST, and COBIT, and delivering IT components of internal audits. The position also supports IT GRC design projects, drafts audit reports, and mentors junior team members. Candidates should have relevant degrees, certifications, and experience in IT audit or information security. The company is part of the globally recognized HLB International network, offering exposure to world-class standards and structured career growth.
Must have
- Bachelor's degree in IT, Information Systems, Accounting, Finance, Cybersecurity, or a related discipline with IT audit exposure
- CISA and ISO 27001 / 27701 Lead Auditor or Lead Implementer credentials
- 2+ years of experience in IT audit, information security, or IT risk, including client coordination and reporting
- Demonstrated experience leading engagements such as ISO 27001 readiness assessments for mid-market clients
- Strong analytical, documentation, and stakeholder communication skills
- Ability to work with moderate independence while escalating significant risks or complex issues appropriately
Technologies
- Cybersecurity
- ISO 27001
- NIST
Highlights
The role is hybrid, offering flexibility between on-site and remote work. Applicants should send their resume to careers@hlblanka.com. The company provides opportunities for career advancement and exposure to global best practices in information security and IT audit.