- POSITION DESCRIPTION

JOB TITLE : Manager-IS Audit GRADE : AVP-I

DEPARTMENT : Audit

LOCATION : Head Office

SUB-DEPARTMENT : Information Systems(IS) Audit

TYPE OF POSITION : Full-time

REPORTS TO : National Manager-IS Audit

REPORTING INTO

Specialist-Audit

- ROLE PURPOSE &
- OBJECTIVE
- Identification of Key IT and IS risk areas in the Bank.
- To conduct or lead audit teams for conducting IT audits and reviews of systems, applications and IT and IS processes.
- To participate in/conduct back-end audit activities like issue closure validation, audit partner interactions.
- SIZE OF THE ROLE

FINANCIAL SIZE NON-FINANCIAL SIZE
- NA
- Number of vendors / consultants: 5-7
- Quantity of equipment / stocks / projects: responsible for laptops assigned to audit partners (3-4).
- Volume of new hires onboarded:2-3
- Conduct approximately 17-20 audits as part of the audit plan.
- KEY DUTIES &

RESPONSIBILITIES OF THE ROLE

Business/ Financials (Only Relevant roles)
- Execution of IT audits assigned in line with Internal Audit Annual Plan.
- Conduct regulatory audits for various banking applications including critical applications such as Core Banking System, Internet Banking etc.
- Examine internal IT controls, evaluate the design and operational effectiveness.
- Test and identify network and system vulnerabilities.
- Review, evaluate and test application controls.

Customer (Both Internal &
- External)

- Prepare and submit audit report to stakeholders and Audit Committee
- Provide recommendations and guidance on identified security and control risks.
- Determine risk exposure, if any and develop remediation strategies.

Internal Process
- Ensure for closure of observations reported during IS/IT audits.
- Coordinate with business units and external security experts for reviews.
- Prepare presentations &




- MoMs for meetings, regulatory submissions.
- Thorough understanding of the internal audit methodology.
- Complete Quality Assurance (QAIP) in terms of IIA guidelines for Audits completed

Innovation &
- Learning

- Continuous learning on bank modules in Swayam learning app.
- Continuous learning on RBI Circulars, IBA Circulars, Statutory department circulars , internal circulars, policies and manuals.
- Undertake additional certifications, trainings and mandatory programs advised by the department.

Minimum Requirements Of Knowledge &

- Skills

Educational

Qualifications

- Degree in Information Technology / Computer Information systems/Electronics &
- Communication.

Experience

- 7-10 years of experience in conducting IT/IS Audit in Banking domain, IT Operations

Certifications
- CISA or CISSP or DISA from ICAI (mandatory)
- Industry certifications like CCNP, CCDP, CEH or similar

Functional Skills
- Understanding of IT Audit methodologies.
- Understanding of Firewalls, VPN, Data Loss Prevention, IDS/IPS, Web-Proxy, routing, switching, server architectures, coding practices and Security Audits.
- Awareness of ITIL framework.
- Awareness of cybersecurity trends and hacking techniques.
- Awareness on ISO 27001, ISO 31000, ISO 22301 standards.

Behavioral Skills
- Strong attention to details with an analytical mind and problem solving skills.
- Ability to work under pressure in a fast-paced workplace.

KEY INTERACTIONS

INTERNAL

EXTERNAL

- Audit Managers
- Other Stake holders of various department
- National Audit Managers
- IT Department –
- Different Functional and Delivery Heads
- IS Department –
- CISO Team
- Cert-In empaneled auditors

PREPARED BY : Audit Team DATE : 16-08-2022

REVIEWED BY : Sathyananda P

DATE : 08-12-2023

LAST UPDATED BY : TM Team

DATE : 06-03-2026

📌 Manager-IS Audit (Bengaluru)
🏢 Ujjivan Small Finance Bank
📍 Bengaluru