Lead - IT/IS Audit

Location:

IT Audit Lead

Key Responsibilities:

• Lead and manage the IT audit function, ensuring compliance with

  RBI guidelines

  ,

  Information Security policies

  , and internal audit standards.
• Plan, execute, and report on IT general controls (ITGC), application controls, cybersecurity, and infrastructure audits.
  
• Oversee and guide a team of IT auditors, ensuring audit quality, timely delivery, and adherence to internal policies.
  
• Evaluate IT risks and controls across key systems, networks, and applications supporting financial operations.
  
• Collaborate with business, IT, and risk management teams to identify control gaps and recommend practical, risk-based solutions.
  
• Review third-party / vendor IT risk assessments and ensure regulatory compliance as per RBI and ISO standards.
  
• Stay current with emerging technologies, cybersecurity trends, and evolving RBI and other regulatory requirements.
  
• Support management in preparation for regulatory and external IT audits.
  
• Prepare audit reports with clear findings, risk implications, and actionable recommendations.

Key Requirements:

• Education:

  Bachelors degree in Information Technology, Computer Science, or a related field (Masters preferred).

• Certification:

  CISA

  (Certified Information Systems Auditor) is

  mandatory

  . Additional certifications such as CISM, CRISC, or ISO 27001 LA are an advantage.

• Experience:

• Minimum

  8 years

  of relevant experience in

  IT Audit / Information Security Audit

  within the

  financial industry

  .
• Strong working knowledge of

  RBI regulations

  ,

  Information security frameworks

  , and

  IT control standards

  .
• Prior

  team leadership

  experience managing auditors or cross-functional audit teams.
• Strong understanding of ITGCs, application audits, network security, and data protection controls.
  
• Excellent communication, analytical, and stakeholder management skills.
  
• Proficiency in using audit tools and risk management frameworks.