Associate Manager II - IT Auditor

About the Team

The IT Audit team at Navi provides independent and objective assurance to the Board and senior management on the effectiveness of governance, risk management, and internal controls. The team plays a critical role in strengthening control maturity across business and technology functions, while enabling Navi to scale responsibly in a highly regulated environment.

As part of the IT Audit team; evaluate risks across applications, infrastructure, cloud environments, data, and third-party ecosystems, with a strong focus on regulatory compliance, operational resilience, and control effectiveness.

About the Role

This role is designed for professionals who demonstrate a strong auditor mindset, professional skepticism, and a willingness to challenge processes constructively.

The role will support execution of technology and information security audits across Navi's businesses, covering IT general controls, application controls, cloud security, regulatory compliance, and third-party risk. You will work closely with technology, product, operations, and compliance teams, while maintaining independence expected of an Internal Audit function. The role offers exposure to regulatory expectations from RBI, IRDAI, SEBI, and NPCI, and provides a strong foundation in risk-based auditing.

What We Expect From You

Internal Audit Execution

• Perform end-to-end execution of IT and Information Security audits, including audit planning, walkthroughs, control testing, documentation and reporting.
• Evaluate design and operating effectiveness of IT general controls, application controls, and information security controls.
• Apply a risk-based audit approach to identify control gaps, assess impact and root cause, and articulate audit observations clearly.
• Maintain audit working papers, evidence repositories, and issue trackers in line with Internal Audit standards.

Technology Risk

• Assess risks across cloud platforms, applications, infrastructure, identity and access management, logging and monitoring, and data protection controls.
• Review BCP and DR controls from an audit and assurance perspective.
• Support follow-up audits and validation of management action plans.

Regulatory and Compliance Audits

• Support audits and reviews aligned to regulatory expectations issued by RBI, IRDAI, SEBI, and NPCI.
• Assist in evaluating compliance with internal policies, standards, and regulatory requirements.
• Support Internal Audit responses and coordination during regulatory inspections and external audits, where applicable.

Stakeholder Management and Reporting

• Engage with technology, engineering, infrastructure, and business teams to understand processes and controls.
• Ask probing questions, challenge control design and effectiveness, and seek evidence-based responses.
• Draft clear, concise, and well-structured audit observations and risk summaries for Internal Audit reports.

Must Haves

Auditor Mindset

• Strong inclination toward independent thinking, professional skepticism, and attention to detail.
• Willingness to challenge existing processes and controls respectfully and objectively.
• Ability to think in terms of risk, impact, root cause, and control effectiveness rather than checklist-based compliance.

Soft Skills

• Good communication skills, both written and verbal.
• Ability to manage multiple audit tasks and meet timelines.
• Comfort working with diverse stakeholders while maintaining audit independence.
• Strong learning orientation and curiosity about technology, risk, and regulation.

Technical and Functional Skills

• Foundational understanding of IT controls, information security concepts, and technology risk.
• Familiarity with audit or control frameworks such as ISO 27001, COBIT, SOC 2, or PCI DSS is a plus.
• Basic exposure to cloud environments, application architecture, or infrastructure concepts is preferred.
• Ability to document audit work clearly, logically, and defensibly.

Qualifications

• Bachelor's degree in Engineering, Technology, Information Systems, or a related field.
• 3+ years of experience in IT audit, internal audit, risk, compliance, or a related domain.
• Certifications or pursuit of certifications such as CISA, ISO 27001 Lead Auditor, or equivalent are a plus.

About Navi

We are on a mission to make finance simple, accessible and affordable for a billion Indians. Guided by a strong customer-first approach, we are building tech-first solutions that work at scale. Our offerings include a range of financial products and services across Loans, Insurance, Mutual Funds, Digital Gold and UPI.

Founded by Sachin Bansal & Ankit Agarwal in 2018, we are one of India's fastest-growing financial services organisations. But we're just getting started!

Our Culture

At Navi, we're a place where ambition meets opportunity and ideas turn into impact quickly. We empower people with high ownership from the start, encouraging them to solve meaningful problems and build with excellence. Teams here work in an environment that values speed, collaboration and craftsmanship, while celebrating learning, growth and shared wins along the way. Whether you're shaping the future of fintech products or driving innovation behind the scenes, life at Navi means being part of a high-energy, talent-driven workplace where your contributions truly make a difference.

We're guided by our own operating system - The Navi OS - a set of principles that shape how we work and win together. You can explore them at navi.com/our-values to see what drives us every day.

If this feels like you, Navi is the place to grow, thrive and make a real impact.