Senior Manager - Information Security Audit

Role: Senior Manager - Information Security Audit

Exp: 7+ Years

Location: Gurugram

Preferred Industry - Banking || Fintech || Financial Services

Purpose of the Job

The incumbent will be responsible for conducting/ monitoring Information Systems audit for the bank.

Responsibilities:

• Conduct IS Audit planning using Risk-Based Audit Approach including IT risk assessment, audit scoping, execution, and follow-up.
• Assist in preparation of Annual IS Audit Plan in line with regulatory requirements and IS Audit standards.
• Independently execute IS Audits, IT Application Audits, and Vendor Audits (onsite/offsite).
• Review third-party IT controls impacting bank systems.
• Track and ensure timely closure of Audit Tracking Reports (ATR).
• Prepare MIS/reporting on planned vs actual audits for Senior Management and Audit Committee.
• Coordinate with external IS Audit partners and monitor audit quality processes.
• Promote usage of CAATs for audit efficiency and support Internal Audit projects/special initiatives.

Key Skills:

• Good understanding of IS Audit Universe covering Applications, Infrastructure, Data, Security, and IT Operations.
• Experience in IT Governance, IT Operations, IT Outsourcing, Application Security, Change Management, Logical Access, BCP/DR, Data Center Controls, and Data Migration Audits.
• Knowledge of RBI and regulatory guidelines related to IT/IS Audit and Information Security.
• Understanding of IS Controls, fraud risks, audit standards, and risk assessment methodologies.
• Ability to identify IT control gaps and assess business impact.

Eligibility:

• 7+ years experience in IS Audit/IT Audit preferably in Banking/Financial Services.
• Qualification: B.E/B.Tech/MCA/Masters Degree.
• Certifications like CISA, ISO27001, CIA, Cyber Security preferred.

If interested kindly share your updated resume at [email protected]