Key Responsibilities

- Conduct IT Audits and Information Security Assessments for banking and financial services clients.
- Execute Governance, Risk & Compliance (GRC) assessments and control testing activities.

Assess compliance against:

o RBI Cyber Security Framework o RBI Master Directions o Third-Party Risk Management (TPRM) Guidelines o ISO/IEC 27001

o COBIT Framework o NIST Cybersecurity Framework

- Preform in risk assessments, control reviews, and gap assessments.
- Review information security policies, procedures, standards, and governance practices.
- Prepare audit reports, risk registers, management presentations, and executive summaries.
- Track remediation activities and validate closure of audit observations.
- Collaborate with business stakeholders, technology teams, and senior management to drive compliance initiatives.

Required Skills

Robust experience in:

o IT Audits o ITGC Assessments o GRC Programs o Risk Management o Compliance Reviews o Banking application Review

- Knowledge of banking technology environments and regulatory requirements.
- Experience with RBI regulations, cyber security guidelines, and TPRM reviews.




- Understanding of Information Security Management Systems (ISMS).
- Excellent report writing, stakeholder management, and communication skills.

Qualifications

- Bachelor's Degree in Engineering, Information Technology, Computer Science, or equivalent.
- 3–6 years of relevant experience in IT Audit, Information Security Audit, or GRC functions.
- Experience working with Banking, NBFC, Payments, or Financial Services clients.

Certifications (Mandatory / Preferred)

Mandatory

- ISO/IEC 27001 Lead Auditor (LA) Certification
- CISA- 5+ Years

Preferred

CRISC

- ISO 27001 Lead Auditor
- CISSP
- CISM

Preferred Candidate Profile

- Experience conducting audits for banks, financial institutions, or consulting organizations.
- Familiarity with RBI, NPCI, and banking regulatory requirements.
- Exposure to Technology Risk, Cybersecurity Governance, and Third-Party Risk

Management programs.
- Ability to independently lead audit engagements and interact with client

Stakeholders.

📌 Information Technology Auditor - NBFC (Chennai)
🏢 global mnc client
📍 Chennai