To support information security compliance through evaluation of security controls, assessment of audit requirements and monitoring of regulatory obligations. The role recommends improvements that strengthen governance and control effectiveness.
Responsibilities
- Plan, coordinate, and support internal and external security audits across the Bank's technology and business environments.
- Manage audits related to information security frameworks and regulatory requirements including:
ISO 27001
PCI-DSS
SOC Reports
RBI Guidelines
SEBI Regulations
Other applicable regulatory and compliance standards
- Act as the primary point of contact for auditors and audit stakeholders.
- Ensure timely completion of audit activities and closure of audit observations.
- Ensure compliance with information security policies, regulatory requirements, industry standards, and internal governance frameworks.
- Track compliance obligations and monitor adherence across technology and business functions.
- Assess the impact of recent and revised regulatory requirements on the Bank's security controls and processes.
- Support implementation of regulatory mandates and compliance initiatives.
- Conduct security control assessments to evaluate the effectiveness of technical,
operational, and administrative controls.
- Review security processes and identify control gaps, weaknesses, and improvement opportunities.
- Perform compliance reviews and risk-based assessments across systems, applications, and infrastructure.
- Recommend corrective actions and control enhancements to strengthen security governance.
- Coordinate collection, validation, and submission of audit evidence.
- Maintain comprehensive audit documentation, compliance records, risk registers, and control inventories.
- Ensure proper documentation of audit findings, action plans, and remediation status.
- Establish and maintain repositories for audit and compliance artefacts.
- Track audit findings, compliance observations, and control deficiencies to successful closure.
- Coordinate with technology, business, risk, and vendor teams for remediation of identified gaps.
- Monitor remediation progress against agreed timelines and escalation mechanisms.
- Validate closure evidence and ensure sustainable implementation of corrective actions.
Qualifications
Experience: 10 to 15 years
Qualifications: M.Tech/B.Tech Or Equivalent Bachelors Degree