It Auditor - Banking & Financial Services

Role Overview

Banking and Financial Services

Risk & Compliance (GRC) reviews, and information security compliance programs. Exposure to RBI regulations and banking risk frameworks is highly preferred.

Key Responsibilities

• Conduct IT Audits and Information Security Assessments for

  banking and financial services

  clients.
• Execute Governance, Risk & Compliance (GRC) assessments and control testing activities.
• Assess compliance against:
• RBI Cyber Security Framework
• RBI Master Directions
• Third-Party Risk Management (TPRM) Guidelines
• ISO/IEC 27001
• COBIT Framework
• NIST Cybersecurity Framework
• Perform risk assessments, control reviews, and gap assessments.
• Review information security policies, procedures, standards, and governance practices.
• Prepare audit reports, risk registers, management presentations, and executive summaries.
• Track remediation activities and validate closure of audit observations.
• Collaborate with business stakeholders, technology teams, and senior management to drive compliance initiatives.

Required Skills

• Strong experience in:
• IT Audits
• ITGC Assessments
• GRC Programs
• Risk Management
• Compliance Reviews
• Banking application Review
• Knowledge of banking technology environments and regulatory requirements.
• Experience with RBI regulations, cybersecurity guidelines, and TPRM reviews.
• Understanding of Information Security Management Systems (ISMS).
• Excellent report writing, stakeholder management, and communication skills.

Qualifications

• Bachelor's Degree in Engineering, Information Technology, Computer Science, or equivalent.
• 2-6 years of relevant experience in IT Audit, Information Security Audit, or GRC functions.
• Experience working with Banking, NBFC, Payments, or Financial Services clients.

Certifications (Mandatory / Preferred)

Mandatory

• ISO/IEC 27001 Lead Auditor (LA) Certification
• CISA- 5+ Years

Preferred

• CRISC
• ISO 27001 Lead Auditor
• CISSP
• CISM

Preferred Candidate Profile

• Experience conducting audits for banks, financial institutions, or consulting organizations.
• Familiarity with RBI, NPCI, and banking regulatory requirements.
• Exposure to Technology Risk, Cybersecurity Governance, and Third-Party Risk Management programs.
• Ability to independently lead audit engagements and interact with client stakeholders.

rahul.kumar3@protivitiglobal.in