IT Auditor - Internal Audit - Bank - CISA

Position Overview:

We are seeking a highly motivated IT Auditor to join the Internal Audit function of a leading private sector bank. The incumbent will be responsible for conducting IT audits, assessing technology risks, evaluating IT controls, and ensuring compliance with regulatory and internal security requirements across the Bank's technology landscape.

Key Responsibilities:

IT Audit & Assurance:

- Execute risk-based IT audits covering applications, infrastructure, databases, cloud environments, cybersecurity, digital banking platforms, and third-party service providers.

- Evaluate the design and effectiveness of IT General Controls (ITGC), application controls, and automated controls.

- Review system access management, user provisioning, privileged access controls, and segregation of duties.

- Conduct audits of core banking systems, payment systems, mobile/internet banking platforms, and digital channels.

- Assess IT governance frameworks and adherence to internal policies and regulatory guidelines.

Information Security & Cybersecurity Reviews:

- Review cybersecurity controls, vulnerability management processes, incident management, and security monitoring frameworks.

- Evaluate compliance with RBI Cyber Security Framework, Information Security policies, and industry best practices.

- Participate in audits covering network security, endpoint security, cloud security, and identity & access management.

Risk Assessment & Compliance:

- Identify technology risks and control gaps and recommend practical remediation measures.

- Track audit observations and validate closure of corrective actions.

- Support regulatory inspections and external audit requirements where applicable.

- Ensure compliance with RBI guidelines, ISMS standards, and internal control frameworks.

Data Analytics & Audit Automation:

- Utilize data analytics tools to identify anomalies, exceptions, and emerging risk indicators.

- Support continuous auditing and monitoring initiatives.

- Assist in enhancing audit methodologies through automation and technology-enabled audit techniques.

Desired Skills & Competencies:

- Strong understanding of ITGC, SDLC, change management, access management, backup and recovery controls.

- Knowledge of Core Banking Systems, Digital Banking Platforms, Payment Systems (UPI, IMPS, NEFT, RTGS).

- Familiarity with Information Security frameworks such as ISO 27001, NIST, COBIT, and ITIL.

- Understanding of cybersecurity concepts and regulatory requirements.

- Proficiency in MS Excel, SQL, Power BI, ACL, IDEA, or other audit analytics tools is desirable.

- Strong analytical, problem-solving, and report-writing skills.

- Excellent stakeholder management and communication skills.

Eligibility Criteria:

- 2 - 6 years of experience in IT Audit, Information Security Audit, Cyber Audit, Technology Risk, or IT Compliance.

- Experience in Banking, Financial Services, FinTech, Consulting, or Big 4 firms preferred.

- CISA certification is mandatory.

- Additional certifications such as CISSP, CEH, ISO 27001 Lead Auditor, CRISC, or CISM will be an added advantage.