• POSITION DESCRIPTION JOB TITLE : Manager-IS Audit GRADE : AVP-I DEPARTMENT : Audit

LOCATION:
Head Office SUB-DEPARTMENT : Information Systems(IS) Audit TYPE OF POSITION : Full time REPORTS TO : National Manager-IS Audit REPORTING INTO Specialist-Audit
• ROLE PURPOSE & OBJECTIVE
• Identification of Key IT and IS risk areas in the Bank.
• To conduct or lead audit teams for conducting IT audits and reviews of systems, applications and IT and IS processes.
• To participate in/conduct back-end audit activities like issue closure validation, audit partner interactions.
• SIZE OF THE ROLE FINANCIAL SIZE NON-FINANCIAL SIZE
• NA
• Number of vendors / consultants: 5-7
• Quantity of equipment / stocks / projects: responsible for laptops assigned to audit partners (3-4).
• Volume of new hires onboarded:2-3
• Conduct approximately 17-20 audits as part of the audit plan.
• KEY DUTIES & RESPONSIBILITIES OF THE ROLE Business/ Financials (Only Relevant roles)
• Execution of IT audits assigned in line with Internal Audit Annual Plan.
• Conduct regulatory audits for various banking applications including critical applications such as Core Banking System, Internet Banking etc.
• Examine internal IT controls, evaluate the design and operational effectiveness.
• Test and identify network and system vulnerabilities.
• Review, evaluate and test application controls. Customer (Both Internal & External)
• Prepare and submit audit report to stakeholders and Audit Committee
• Provide recommendations and guidance on identified security and control risks.
• Determine risk exposure, if any and develop remediation strategies. Internal Process
• Ensure for closure of observations reported during IS/IT audits.
• Coordinate with business units and external security experts for reviews.




• Prepare presentations & MoMs for meetings, regulatory submissions.
• Thorough understanding of the internal audit methodology.
• Complete Quality Assurance (QAIP) in terms of IIA guidelines for Audits completed Innovation & Learning
• Continuous learning on bank modules in Swayam learning app.
• Continuous learning on RBI Circulars, IBA Circulars, Statutory department circulars , internal circulars, policies and manuals.
• Undertake additional certifications, trainings and mandatory programs advised by the department. Minimum Requirements Of Knowledge & Skills Educational Qualifications
• Degree in Information Technology / Computer Information systems/Electronics & Communication. Experience
• 7-10 years of experience in conducting IT/IS Audit in Banking domain, IT Operations Certifications
• CISA or CISSP or DISA from ICAI (mandatory)
• Industry certifications like CCNP, CCDP, CEH or similar Functional Skills
• Understanding of IT Audit methodologies.
• Understanding of Firewalls, VPN, Data Loss Prevention, IDS/IPS, Web-Proxy, routing, switching, server architectures, coding practices and Security Audits.
• Awareness of ITIL framework.
• Awareness of cybersecurity trends and hacking techniques.
• Awareness on ISO 27001, ISO 31000, ISO 22301 standards. Behavioral Skills
• Strong attention to details with an analytical mind and problem solving skills.
• Ability to work under pressure in a fast-paced environment. KEY INTERACTIONS INTERNAL EXTERNAL
• Audit Managers
• Other Stake holders of various department
• National Audit Managers
• IT Department – Different Functional and Delivery Heads
• IS Department – CISO Team
• Cert-In empaneled auditors PREPARED BY : Audit Team DATE : 16-08-2022 REVIEWED BY : Sathyananda P DATE : 08-12-2023 LAST UPDATED BY : TM Team DATE : 06-03-2026

📌 Manager-IS Audit (Bengaluru)
🏢 Ujjivan Small Finance Bank
📍 Bengaluru