Role Overview

We are seeking a highly motivated IT Audit & GRC professional with strong experience in the Banking and Financial Services sector. The ideal candidate will have hands-on experience in IT Audits, Application Security, IT General Controls (ITGC) assessments, Governance

Risk & Compliance (GRC) reviews, and information security compliance programs. Exposure to RBI regulations and banking risk frameworks is highly preferred.

Key Responsibilities

- Conduct IT Audits and Information Security Assessments for banking and financial services clients.
- Execute Governance, Risk & Compliance (GRC) assessments and control testing activities.
- Assess compliance against:
- RBI Cyber Security Framework
- RBI Master Directions
- Third-Party Risk Management (TPRM) Guidelines
- ISO/IEC 27001
- COBIT Framework
- NIST Cybersecurity Framework
- Perform risk assessments, control reviews, and gap assessments.
- Review information security policies, procedures, standards, and governance practices.
- Prepare audit reports, risk registers, management presentations, and executive summaries.
- Track remediation activities and validate closure of audit observations.
- Collaborate with business stakeholders, technology teams, and senior management to drive compliance initiatives.

Required Skills

- Robust experience in:
- IT Audits
- ITGC Assessments
- GRC Programs
- Risk Management
- Compliance Reviews




- Banking application Review
- Knowledge of banking technology environments and regulatory requirements.
- Experience with RBI regulations, cybersecurity guidelines, and TPRM reviews.
- Understanding of Information Security Management Systems (ISMS).
- Excellent report writing, stakeholder management, and communication skills.

Qualifications

- Bachelor's Degree in Engineering, Information Technology, Computer Science, or equivalent.
- 2-6 years of relevant experience in IT Audit, Information Security Audit, or GRC functions.
- Experience working with Banking, NBFC, Payments, or Financial Services clients.

Certifications (Mandatory / Preferred)

Mandatory

- ISO/IEC 27001 Lead Auditor (LA) Certification
- CISA- 5+ Years

Preferred

- CRISC
- ISO 27001 Lead Auditor
- CISSP
- CISM

Preferred Candidate Profile

- Experience conducting audits for banks, financial institutions, or consulting organizations.
- Familiarity with RBI, NPCI, and banking regulatory requirements.
- Exposure to Technology Risk, Cybersecurity Governance, and Third-Party Risk Management programs.
- Ability to independently lead audit engagements and interact with client stakeholders.

Candidates with relevant years of strong experience in Banking/Financial Services/NBFC/Insurance IT Audits can also share their CVs directly to [email protected]

📌 It Auditor - Banking & Financial Services (Chennai)
🏢 protiviti india
📍 Chennai