Ujjivan Small Finance Bank - Information System Audit Manager - Network Security

Key Responsibilities :

- Execute IT audits in line with the Internal Audit Annual Plan.

- Conduct regulatory audits for critical banking applications (e.g., Core Banking System, Internet Banking).

- Examine internal IT controls for design and operational effectiveness.

- Test and identify network and system vulnerabilities to ensure security and compliance.

- Review, evaluate, and test application controls for risk mitigation.

- Prepare and present audit reports to stakeholders and the Audit Committee.

- Provide actionable recommendations for security and control risks.

- Assess risk exposure and develop remediation strategies.

- Ensure timely closure of observations reported during IS/IT audits.

- Coordinate with business units and external security experts for reviews.

- Prepare presentations, minutes of meetings (MoMs), and regulatory submissions.

- Complete Quality Assurance (QAIP) per IIA guidelines for completed audits.

Education :

Certifications :

Mandatory : CISA, CISSP, or DISA (ICAI).

Preferred/Additional : CCNP, CCDP, CEH, CRISC, or similar certifications.

Technical Skills :

Mandatory :

- Hands-on experience with core banking systems and internet banking platforms.

- Knowledge of firewall, IDS/IPS, VPN, and endpoint security solutions.

- Experience with risk management frameworks (e.g., ISO 27001, NIST).

- Strong understanding of database security (Oracle, SQL Server, PostgreSQL).

- Familiarity with audit tools such as ACL, IDEA, or equivalent.

- Knowledge of Windows and Linux server environments, Active Directory, and group policy configurations.

- Familiarity with cloud security (AWS, Azure, or GCP environments).

Preferred :

- Experience with containerized environments (Docker, Kubernetes) from a security and compliance perspective.

- Familiarity with DevSecOps pipelines and secure SDLC practices.

Experience :

- Proven track record of managing complex audits, preparing reports, and providing strategic recommendations.