It Auditor - Banking & Financial Services

Role Overview

We are seeking a highly motivated IT Audit & GRC professional with strong experience in the Banking and Financial Services sector. The ideal candidate will have hands-on experience in IT Audits, Application Security, IT General Controls (ITGC) assessments, Governance

Risk & Compliance (GRC) reviews, and information security compliance programs. Exposure to RBI regulations and banking risk frameworks is highly preferred.

Key Responsibilities

• Conduct IT Audits and Information Security Assessments for banking and financial services clients.
• Execute Governance, Risk & Compliance (GRC) assessments and control testing activities.
• Assess compliance against:
• RBI Cyber Security Framework
• RBI Master Directions
• Third-Party Risk Management (TPRM) Guidelines
• ISO/IEC 27001
• COBIT Framework
• NIST Cybersecurity Framework
• Perform risk assessments, control reviews, and gap assessments.
• Review information security policies, procedures, standards, and governance practices.
• Prepare audit reports, risk registers, management presentations, and executive summaries.
• Track remediation activities and validate closure of audit observations.
• Collaborate with business stakeholders, technology teams, and senior management to drive compliance initiatives.

Required Skills

• Strong experience in:
• IT Audits
• ITGC Assessments
• GRC Programs
• Risk Management
• Compliance Reviews
• Banking application Review
• Knowledge of banking technology environments and regulatory requirements.
• Experience with RBI regulations, cybersecurity guidelines, and TPRM reviews.
• Understanding of Information Security Management Systems (ISMS).
• Excellent report writing, stakeholder management, and communication skills.

Qualifications

• Bachelor's Degree in Engineering, Information Technology, Computer Science, or equivalent.
• 2-6 years of relevant experience in IT Audit, Information Security Audit, or GRC functions.
• Experience working with Banking, NBFC, Payments, or Financial Services clients.

Certifications (Mandatory / Preferred)

Mandatory

• ISO/IEC 27001 Lead Auditor (LA) Certification
• CISA- 5+ Years

Preferred

• CRISC
• ISO 27001 Lead Auditor
• CISSP
• CISM

Preferred Candidate Profile

• Experience conducting audits for banks, financial institutions, or consulting organizations.
• Familiarity with RBI, NPCI, and banking regulatory requirements.
• Exposure to Technology Risk, Cybersecurity Governance, and Third-Party Risk Management programs.
• Ability to independently lead audit engagements and interact with client stakeholders.

Candidates with relevant years of strong experience in Banking/Financial Services/NBFC/Insurance IT Audits can also share their CVs directly to [email removed]