Roles & Responsibilities :

- Plan, execute, and finalize IT Internal Audit reviews across processes, branches, and concurrent audit assignments as per the approved Internal Audit Plan.

- Assist the HIA in developing the Risk-Based Internal Audit Plan for IT and technology processes.

- Prepare and maintain an Audit Universe covering all IT processes and sub-processes.

- Conduct risk assessments of the IT Audit Universe and identify priority areas for audit review.

- Track significant changes in IT systems, processes, technology, and business operations to identify emerging audit areas.

- Finalize audit scope, objectives, and approach under supervisory guidance.

- Conduct process walkthroughs to understand processes, systems, risks, and controls and document the same.

- Identify key risks and controls and develop Audit Programs, Process Flowcharts, and Risk Control Matrices (RCMs).

- Perform control testing based on the approved audit plan and assess the design and operating effectiveness of controls.

- Demonstrate strong knowledge and hands-on experience in IT Governance, IT policies, IT infrastructure, network and service management, capacity management, BCP & DR, backup and restoration, IT project management, change and patch management, access management, and password management.

- Evaluate Information Security and Cyber Security practices covering SOC and incident management, data security, antivirus/endpoint security, email security, cloud security, VAPT, security monitoring, and incident response.

- Review IT outsourcing and third-party technology arrangements in line with applicable RBI guidelines and regulatory requirements.

- Ensure adherence to applicable RBI guidelines, regulatory requirements, internal policies, and industry best practices.

- Identify regulatory, process, technology, and control gaps and recommend appropriate corrective actions.

- Prepare detailed audit working papers supporting audit observations and conclusions.

- Discuss audit queries, findings, and recommendations with process owners and management.

- Ensure audit assignments are completed within agreed timelines and quality standards.

- Prepare draft and final Internal Audit Reports, including observations, risk ratings, root causes, and recommendations.

- Participate in quarterly Internal Audit / Audit Committee presentations and support reporting of key IT audit observations.

- Monitor open audit observations and track management action plans.

- Conduct Post Implementation Reviews (PIRs) to validate implementation and effectiveness of corrective actions.

- Escalate overdue or high-risk observations to the appropriate stakeholders.

Qualifications & Experience :

- B.Tech / B.E. in Computer Science, Information Technology, Electronics, or a related discipline.

- Professional certifications such as CISA and/or ISO 27001 are preferred.

- 510 years of relevant experience in Information Systems / IT Audit, preferably with a bank, leading NBFC, or large financial institution.

- Experience in RBI-regulated environments and financial services technology audit will be highly preferred.

- Strong proficiency in MS Office, particularly Excel, Word, and PowerPoint.