Technology Auditor role is responsible for evaluating an organization’s information systems, technology infrastructure, and IT-related processes to ensure they are secure, reliable, compliant, and aligned with business objectives.

- IT Governance & Controls Review and assess IT general controls (ITGC) such as:

Access management

Change management

IT operations Evaluate alignment with frameworks like COBIT, ITIL, ISO 27001. Assess IT governance structure, policies, and procedures. 2.

Information

Security & Cyber Risk Assess effectiveness of information security controls. Review controls related to:

Logical and physical access

Data confidentiality, integrity, and availability

Incident response and breach management

Identify risks related to cyber threats, malware, and data leakage.





- Application & Systems Audit Audit applications (UPI, IMPS, NFS, Rupay etc.). Review:

Application access controls

Interface controls

Data validation and authorization checks 4. Infrastructure & Technology Reviews Review IT infrastructure including:

Servers, databases, networks

Cloud environments and outsourced services. Evaluate business continuity (BCP) and disaster recovery (DR) arrangements.

- Regulatory & Compliance Assurance Ensure compliance with applicable laws, regulations, and standards such as:

RBI / UIDAI / NCIIPC guidelines.

Data Privacy Laws (e.g., DPDP Act). Support statutory, concurrent, and regulatory audits.

📌 Technology Audit (Mumbai)
🏢 NPCI
📍 Mumbai