Manager (IS Audit) – Internal Audit

We are seeking an individual to join our Internal Audit team as a Manager. The ideal candidate should
possess knowledge and expertise in IS audit to effectively contribute to various audit activities including
IT vendor audits.

• Familiarity with RBI and CERT- IN guidelines applicable to NBFC.
• Interpret IT control requirements from regulatory guidelines and circulars.
• Evaluate and assesse information technology systems, processes and controls to ensure that
• they comply with relevant regulatory, legal and industry standards.
• Analyze potential threats and risks, evaluate the impact and likelihood of security incidents and update the risk register.
• Assist in developing, designing of IS audit plan using a risk based approach and execution.
• Collaborate with cross functional teams to verify the effectiveness of implemented controls and provide recommendation wherever applicable.
• Develop reports/presentations on findings and communicate to the auditee.
• Ensure adequate follow-up for timely closure of observations.
• Acquainted with use of CAATs tools.
• Coordinate with external auditors on IT/IS related matters.
• Thorough understanding or practical experience of technology audit assignments including cyber security, data privacy, business continuity, cloud security, IT application controls, network perimeter security etc.
• Conduct process reviews through stakeholder interviews, data validations and document analysis.
• Monitoring and ensuring quality of audit artefacts generated by information assets and technology departments.
• Understanding of industry standards and frameworks such as NIST, COBIT, OWASP.
• Evaluating the effectiveness of vendor SOC Type 2 reports.
• Conduct any special assignments if required in consultation with the reporting Manager.
• Other projects and duties as assigned.

KEY RESPONSIBILITIES

• Timely execution of assigned audit activities.
• Preparation of accurate reports adhering to timelines.
• Focus on material aspect during IS audit.
• Liaising with all relevant stakeholders and maintain good working relationship.
• Expertise in ITGC, cybersecurity, and regulatory technology risks.
• Ability to exercise independent judgment and challenge senior stakeholders constructively.
• Strong communication, and analytical skills.

SKILLS / COMPETENCIES REQUIRED

• Minimum 4+ years of experience in the field of IT/IS audit in Financial Sector preferably NBFC / Bank.
• Bachelor’s Degree in Information System, Business or Accounting.
• Certifications like ISO 27001, ISO 42001, CISA, CISM, CISSP shall be an added advantage.
• Knowledge: Risk assessment and control techniques, benchmarking etc.
• Must be capable of independently performing the audit assignments.
• Effective communication skills, both verbal and written.
• Proven abilities for achievement of desired results.
• Must be flexible in terms of work hours & multi-tasking and have strong work prioritization skills.
• Proven self-management ability and adherence to strict timelines.
• Ability to deliver in challenging situation.
• Strong interpersonal and analytical skills including proficiency in MS office