Role & responsibilities

- Lead the information systems audits, including risk assessment, scope determination and support to prepare organization's information systems annual audit plan, aligning it with business objectives and compliance requirements.
- Oversee, participate in audit execution & report preparation of information Technology audits, application controls audits, Cyber Security audits.
- Review effectiveness of Risk assessments, including vulnerability assessments and penetration testing performed by Security team.
- Assess and evaluate the effectiveness of information systems controls, security measures, and data protection mechanisms. • Evaluate the information systems security and controls of third-party vendors and partners.
- Ensure compliance with regulatory requirements (e.g., RBI, NHB) and industry standards (e.g., ISO 27001) in relation to information systems.




- Collaborate with stakeholders across the organization, including IT management, business units, and external auditors, to facilitate audit engagements and address findings.
- Prepare and present audit findings and recommendations to senior management. Maintain comprehensive audit documentation.
- Promote a culture of cybersecurity awareness and best practices among staff.
- Should be updated on emerging technology, trends and assess their impact on the organization's information systems and security.

Preferred candidate profile Graduation (Any), Engineering in Computer Science preferred Candidates with certifications (e.g., CISA, CISSP, CISM) and familiarity with relevant regulations and standards (e.g., RBI, NHB, ISO 27001, NIST) will be given preferences

📌 Assistant Vice President, IT IS Audit (Mumbai)
🏢 SMFG India Credit
📍 Mumbai