Role & responsibilities :

This position would include the mentioned set of responsibilities but not limited to:

Key highlights of the role are listed below (purely indicative and not limiting):

- Execute risk-based IT, Information Systems, Information Security and Cyber Security audits across the organization.
- Conduct audits of Core Systems, Card Management Systems, Digital Platforms, Infrastructure, Data Centers, Cloud Environments and Network Security.
- Review IT Governance, IT Operations. Change Management, Incident Management, Access Management and Business Continuity frameworks.
- Assess compliance with applicable RBI guidelines, DPDP Act, regulatory requirements, internal policies and industry best practices.
- Perform application control reviews, information security assessments, vulnerability management revlews and cyber security audits.
- Evaluate third-party/vendor risk management and outsourced technology service providers.




- Track implementation of audit recommendations and validate closure of audit observations.
- Prepare high-quality audit reports for senior management, Audit Committee and regulators.
- Co-ordination with external auditors/Consultants for timely execution of audits
- Conduct risk assessment & prepare annual risk-based audit plan for IT & IS Audits.

Applicants should possess the following attributes:

- Experience in auditing Windows, Linux, Database. Network, Cloud, Applications environments, ITGC & Application controls, Vendor audits, API, VAPT, rlSk assessment etc.
- Thorough understanding of RBI regulations applicable to NBFCS, Digital Lending, Information Security & Information technology.
- Hands on experience with ISO 27001, COBIT, NIST, PCI-DSS and cybersecurity frameworks.
- Solid communication skills both written & verbal.
- Strong analytical, auditing & reporting skills,

📌 Sr. Manager/ Manager - Internal Audit (Goregaon)
🏢 BOBCARD
📍 Goregaon