We are seeking an experienced IT Audit professional to join our team in Mumbai.

The ideal candidate will be responsible for managing and executing a wide range of IT audit engagements, ensuring compliance with regulatory requirements, strengthening IT governance, and enhancing the organization's risk management framework.

The role requires strong expertise in IT audits, information security, regulatory compliance, and stakeholder management, preferably within the BFSI sector.

Key Responsibilities :

Execute and manage multiple IT audit assignments, including :

- IT Application Audits

- IT Infrastructure Audits

- Application Security Assessments

- Vendor Audits

- Concurrent Audits

- Thematic Audits

- Regulatory and compliance-related audit assignments

- Develop and enhance the Risk-Based IT Audit Framework in alignment with RBI regulations and ISO 27001 standards.

- Coordinate and manage external audit partners to ensure timely, cost-effective, and high-quality audit delivery.

- Drive continuous improvement initiatives to enhance audit efficiency without increasing resource requirements.

- Establish, maintain, and improve the Quality Assurance & Improvement Program (QAIP).

- Facilitate internal and external quality assessments for the IT Audit function.

- Provide advisory support to technology and business teams on IT controls, governance, cybersecurity, and IT risk management.

- Evaluate the effectiveness of IT controls and recommend practical risk mitigation measures.

- Prepare comprehensive audit reports and present key findings and recommendations to senior management and board-level stakeholders.

- Monitor audit observations and ensure timely closure of identified issues.

- Stay updated on RBI guidelines, cybersecurity trends, and emerging technology risks.

Required Qualifications :

- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline.

- 3-10 years of experience in IT Audit, preferably within the Banking, Financial Services, and Insurance (BFSI) industry.

- Mandatory certification : Certified Information Systems Auditor (CISA).

- Preferred certifications :

1. Certified Information Security Manager (CISM)

2. Certified in Risk and Information Systems Control (CRISC)

3. Certified Information Systems Security Professional (CISSP)

Required Skills & Competencies :

- Strong understanding of IT General Controls (ITGC), application controls, cybersecurity, and IT risk management.

- Good knowledge of RBI regulations, circulars, and technology risk guidelines applicable to BFSI.

- Familiarity with ISO 27001, information security frameworks, and audit methodologies.

- Excellent analytical, critical thinking, and problem-solving skills.

- Strong project management and stakeholder management capabilities.

- Experience in coordinating with external auditors and cross-functional teams.

- Excellent verbal, written, and presentation skills.

- Ability to manage multiple assignments and work in a fast-paced environment.

- Team player with strong interpersonal skills and a proactive, self-driven approach.

- Willingness to travel as required