Specific Role Responsibilities:

Strategic Leadership:

- Develop and implement a risk-based audit plan aligned with business objectives and regulatory requirements.
- Oversee the end-to-end execution of complex technology audits, including cybersecurity, software development, IT infrastructure, data privacy, and ITGC.
- Perform continuous risk assessments to identify emerging technology risks and adapt the audit plan accordingly.

Stakeholder Engagement:

- Build and maintain strong relationships with senior management and the audit committee.
- Communicate audit findings, risks, and recommended actions effectively to stakeholders.

Team Management:

- Lead, mentor, and coach a high-performing team of technology auditors.
- Foster a culture of continuous learning, professional development, and alignment with UK working hours.

Quality Assurance:

- Ensure consistent application of internal audit methodology and adherence to ISACA, IIA, and other professional standards.
- Prepare and present comprehensive, high-impact audit reports articulating findings, root causes, and actionable recommendations.

Innovation and Continuous Improvement:

- Drive continuous improvement within the internal audit function by leveraging technology, including AI and advanced analytics.
- Ensure IT audit activities align with regulatory requirements and frameworks (e.g., NIST, ISO 27001, DORA).

Functional Area Responsibilities:

Technology Governance and Strategy:

- Develop a comprehensive, risk-based audit plan aligned to IT strategy.
- Assess IT governance, risk management, and internal control frameworks.
- Provide strategic advisory to executive management and audit committee on technology risks.
- Oversee audits of emerging technologies, including AI, ML, and RPA.

Cybersecurity and Information Security:

- Integrate cybersecurity into the audit plan, focusing on vulnerability management, access controls,



and data protection.
- Evaluate the design and effectiveness of technical and administrative security controls.
- Assess incident response and crisis management readiness.
- Ensure compliance with data privacy regulations (e.g., GDPR, CCPA).

IT Operations and Infrastructure:

- Audit cloud governance, security, and controls.
- Review business continuity and disaster recovery plans.

Data Governance and Analytics:

- Assess data accuracy, integrity, and privacy across systems.
- Lead adoption of audit analytics for comprehensive data review.
- Evaluate risks associated with IT vendors and third-party providers.

Team Leadership and Management:

- Oversee audit execution and quality assurance activities.
- Attract, hire, and mentor skilled IT auditors to address complex technology risks.

Stakeholder Engagement and Influence:

- Build trusted relationships with senior leadership (CTO, CISO) and audit committees.
- Present findings and risk insights to influence executive decision-making.
- Foster a culture of risk awareness and strong internal control practices.

Experience Required:

- Minimum 15 years progressive IT audit experience, including senior leadership experience.
- At least 3 years in a first-line technology role (developer, infrastructure engineer, cybersecurity specialist, etc.).
- Bachelor's degree in Cyber/Information Technology, Computer Science, or related field; master's/MBA advantageous.
- Certifications: CISA, CISM, CISSP highly desirable; CIA advantageous.
- Deep technical expertise in cybersecurity, cloud platforms, network infrastructure, SDLC, data governance, and IT risk management frameworks.
- Robust analytical, problem-solving, and critical-thinking skills.
- Proven leadership, project management, and organisational skills.
- Exceptional written and verbal communication skills for technical and non-technical audiences.
- High integrity, professionalism, and professional scepticism.

📌 Technology Internal Audit Director (Gurugram)
🏢 FNZ Group
📍 Gurugram