IT / IS Audit Lead - DGM / AVP

Educational & Professional Credentials

• Bachelor of Technology (BE / B. Tech) or ME in Computer Science, MCA or equivalent.
• Good to have Information Security Certifications like CISA, CISM, CISSP etc.

Required Knowledge & Skills

• Work with internal and external stakeholders to assess the IT architecture or proposed IT architecture solutions to identify the risk areas with regards to PCI controls.
• Assess the network architecture and or reviews the Firewall rulesets, Network devices / appliances to see if they are aligned with the PCI control requirements and recommends compensatory controls where necessary.
• Execute operational activities to support audit and compliance activities including technical validation processes.
• Conduct PCI DSS scoping engagements, gap analysis and assessments related to securing the Cardholder Data Environment.
• Effectively multi-tasks on multiple assignments and deliverables.
• Actively accepts individual and team responsibilities to meet commitments. Takes responsibility for own performance and actions and demonstrates responsibility and teamwork towards overall team / department goals.
• Discuss the SOP document with all relevant stakeholders - right from process owner to the BU functional heads Detailed understanding of SOC reports (SOC2, Type 1, 2), ISMS reports and ability to relate the IT General Controls, IT Application Controls, Cyber Controls to the SOC framework.
• Develop and Maintain Vendor Risk Management / Third Party Risk Management Program including Vendor Onboarding Audit, Periodic Vendor Assessment, Maintain TPRM Database.
• Review and implement controls and policies as per RBI and other regulatory requirements. Maintain ISMS framework, evaluate effectiveness of implemented controls and provides recommendations for improvement.
• Facilitate Client Due - Diligence in collaboration with Business.
• Develop and Maintain Enterprise Risk Assessment framework.
• Perform Internal Assessment against various Standards to ensure the established policies are being followed and prepare internal reports.
• Contract review and providing responses to client Request for Proposal (RFP)

Skills Required

Pci Dss