This role assists the Head of Internal Audit to ensure that the organization has in place a sound system of Internal control with adequate established policies, procedures, and guidelines. Helps in performing IT audits as per Risked Based Internal Audit Plan. Make the necessary recommendations for improvement, rectifications of weaknesses, highlights financial leakages and non-compliance to the IT laws/ regulations.
Key responsibility:
Planning and execution of audits:
- Assist the Head of Internal Audit to plan for IT audits at appropriate intervals. Ensure the completion of all planned audits within the time.
- Review and evaluate the adequacy and effectiveness of policies and procedures applicable to the IT functions subjected to audit.
- Examine internal IT controls, evaluate the design and operational effectiveness, determine exposure to risk and suggest remedial measures.
- Performs IT General control testing (ITGC), IT Application control testing (ITAC) and key reports testing to determine the adequacy and effectiveness of internal controls.
- Anticipate and identify the various risks and controls associated with the systems/applications in place.
- Identify process improvements that lead to cost savings, enhanced security or revenue enhancement opportunities.
- Review, evaluate and test network / system vulnerabilities and suggest relevant controls.
- Prepares reports based on the results of stated audits to be presented and shared with the audit committee.
- Evaluates the responses obtained from the auditee for its adequacy and completeness.
- Ensure that all audit records / documentations and working papers are maintained in detail.
- Ensure that all information of confidential in nature is held in a confidential and secure mode.
- Performs other incidental activities like special assignments, process audits as required by the management.
- Collaborates with internal and external auditors on IT-related matters.
Tracks and follows up on open audit issues and key business initiatives
SKILLS AND KNOWLEDGE
- Solid written and verbal communications skills, including listening and interviewing skills. Should have the ability to interact with stakeholders.
- Sound Knowledge of digital platforms used by NBFC’s and other lending institutions.
- Demonstrated aptitude for problem solving and root cause analysis (IT & business process).
- Critical thinking skills and ability to work in fast paced environment
- Sound knowledge of MS Office (Word, Powerpoint, Excel), Salesforce etc.
Qualifications
- Must be an experienced Information Technology expert, Bachelor’s degree in information technology, MBA or CISA.
Additional certifications such as Certified Information Systems Security Professional (CISSP), or other related certifications is a plus.
Work Experience
- Minimum 3 to 6 years’ experience, NBFC (preferably) or private banks.
Exposure in Risk Based Internal Audit, ITGC, ITAC, IT Audit tools and IT Compliances etc.