The AVP (IS Audit) - Internal Audit acts as the designated lead for the Information Systems Audit vertical and supports the Head of Internal Audit in providing independent, risk-based assurance over IT governance, information security, cybersecurity, system controls, and regulatory compliance. The role ensures effective audit coverage of technology-driven processes and readiness for regulatory and Audit Committee oversight.

- Leadership & Governance

 Act as lead for the IS Audit vertical and assume leadership responsibilities in the absence of the Head.

 Support formulation and execution of the Board/Audit Committee-approved risk-based IS Audit Plan.

 Provide guidance, supervision, and technical review for IS audit team members and external auditors.

 Act as a senior liaison with IT leadership, business heads, regulators, and external auditors.

- Audit Planning, Execution & Review

 Plan, lead, and independently review audits covering IT General Controls (ITGC) including SOX testing and documentation, application controls, cybersecurity, cloud environments, and data governance.

 Ensure audit execution aligns with regulatory expectations (RBI/SEBI/IRDAI and other regulators as applicable), IIA Standards, and internal audit methodology.

 Review audit scopes, testing procedures, working papers, root cause analysis, and conclusions.

 Ensure adequate coverage of core systems, interfaces, automated controls, and critical end-user computing.

- Technology Risk & Cybersecurity Oversight

 Assess IT governance structures, technology risk management frameworks,



and alignment of IT strategy with business objectives.

Review cybersecurity posture including VAPT results, SOC reports, incident management, DR/BCP, and cyber resilience controls.

 Evaluate access management, change management, data integrity, and system availability controls.

 Oversee audits of outsourced IT services, cloud service providers, fintech partners, and critical vendors.

- Regulatory & Compliance Support

 Ensure IS audit coverage addresses applicable regulatory directions, circulars, and supervisory expectations.

 Support regulatory inspections, thematic reviews, and compliance assurance relating to IT and cybersecurity.

 Track emerging regulatory and technology risks and ensure timely audit focus.

- Reporting & Stakeholder Management

 Review and finalize IS audit reports with transparent risk articulation, prioritization, and actionable recommendations.

 Monitor closure of audit observations and escalate delays or high-risk issues appropriately.

 Prepare presentation of key audit findings, trends, and risk themes to senior management and the Audit Committee.

- Quality Assurance & Continuous Improvement

 Ensure compliance with Internal Audit Charter, IIA Standards, and Quality Assurance and Improvement Program (QAIP).

 Drive continuous improvement through use of data analytics, audit automation, and continuous auditing techniques.

 Contribute to development and refinement of IS audit frameworks, policy, manual, templates, and methodologies.

 Provide IS audit inputs in integrated audits.

📌 Assistant Vice President - Internal Audit (Mumbai)
🏢 HDB Financial Services
📍 Mumbai