Roles &

Responsibilities :

- Plan, execute, and finalize IT Internal Audit reviews across processes, branches, and concurrent audit assignments as per the approved Internal Audit Plan.
- Assist the HIA in developing the Risk-Based Internal Audit Plan for IT and technology processes.
- Prepare and maintain an Audit Universe covering all IT processes and sub-processes.
- Conduct risk assessments of the IT Audit Universe and identify priority areas for audit review.
- Track significant changes in IT systems, processes, technology, and business operations to identify emerging audit areas.
- Finalize audit scope, objectives, and approach under supervisory guidance.
- Conduct process walkthroughs to understand processes, systems, risks, and controls and document the same.
- Identify key risks and controls and develop Audit Programs, Process Flowcharts, and Risk Control Matrices (RCMs).
- Perform control testing based on the approved audit plan and assess the design and operating effectiveness of controls.
- Demonstrate strong knowledge and hands-on experience in IT Governance, IT policies, IT infrastructure, network and service management, capacity management, BCP & DR, backup and restoration, IT project management, change and patch management, access management, and password management.
- Evaluate Information Security and Cyber Security practices covering SOC and incident management, data security, antivirus/endpoint security, email security, cloud security, VAPT, security monitoring, and incident response.




- Review IT outsourcing and third-party technology arrangements in line with applicable RBI guidelines and regulatory requirements.
- Ensure adherence to applicable RBI guidelines, regulatory requirements, internal policies, and industry best practices.
- Identify regulatory, process, technology, and control gaps and recommend appropriate corrective actions.
- Prepare detailed audit working papers supporting audit observations and conclusions.
- Discuss audit queries, findings, and recommendations with process owners and management.
- Ensure audit assignments are completed within agreed timelines and quality standards.
- Prepare draft and final Internal Audit Reports, including observations, risk ratings, root causes, and recommendations.
- Participate in quarterly Internal Audit / Audit Committee presentations and support reporting of key IT audit observations.
- Monitor open audit observations and track management action plans.
- Conduct Post Implementation Reviews (PIRs) to validate implementation and effectiveness of corrective actions.
- Escalate overdue or high-risk observations to the appropriate stakeholders.

Qualifications &

Experience :

- B.Tech / B.E. in Computer Science, Information Technology, Electronics, or a related discipline.
- Professional certifications such as CISA and/or ISO 27001 are preferred.
- 510 years of relevant experience in Information Systems / IT Audit, preferably with a bank, leading NBFC, or large financial institution.
- Experience in RBI-regulated environments and financial services technology audit will be highly preferred.
- Solid proficiency in MS Office, particularly Excel, Word, and PowerPoint.

📌 IT Audit Manager - Information Security (India)
🏢 OrangeShark
📍 India