Job Purpose :
To assess the adequacy and effectiveness of IT controls, systems, security frameworks, and IT governance processes, ensuring alignment with regulatory requirements and internal policies.
Key Responsibilities :
- Conduct IT audits covering applications, databases, and infrastructure.
- Evaluate the design and operating effectiveness of IT general controls (ITGCs), application controls, and security measures.
- Review IT policies, user access management, change management, and data backup processes.
- Perform audits of IT system implementations, and vendor management.
- Identify control gaps, assess associated risks, and recommend corrective actions.
- Support business and operational audits by providing IT-related insights.
- Monitor compliance with regulatory and information security guidelines (e.g., RBI).
- Prepare audit reports, discuss findings with stakeholders, and track closure of observations.
- Collaborate with external auditors and regulators for IT audit reviews.
Key Skills & Competencies :
Strong understanding of IT systems, security, and internal controls.Working knowledge of IT frameworks such as RBI, ISO 27001.Analytical thinking, problem-solving, and report-writing skills.Good communication and stakeholder management abilities.Qualifications & Experience :
Graduate in Computer Science / IT / Engineering.Professional certifications preferred : CISA, CISM, or CIA (with IT specialization).38 years of relevant experience in IT Audit, Information Security, or IT Risk Management.