Associate Director - Audit & Risk

The person will be responsible for risk-based audit activities across several different business areas within Crisil. As an Associate Director in Crisil Internal Audit team the person will be responsible for leading internal audit process reviews in collaboration with an internal audit service provider, implementing and executing enterprise risk management (ERM) framework defined, leading risk-related projects, and performing technology audits. The role requires strong stakeholder management, risk assessment expertise, and the ability to provide insights on process enhancements.

The ideal candidate for this role must be an experienced financial services professional with strong internal control and auditing skills, experience in ERM engagements with a strong level of comfort with data and technology.

• Partner with the internal audit service provider to plan and execute the internal audit program.
• Lead and execute internal audit process reviews, ensuring compliance with regulatory and organizational standards.
• Conduct technology audits (40-50% focus), including cybersecurity, data privacy, and emerging technology risk assessments.
• Develop and execute risk-based audit plans, ensuring the identification of key control gaps and associated risks.
• Oversee Enterprise Risk Management (ERM) governance, including risk identification, assessment, and mitigation strategies.
• Lead and manage risk-related projects, ensuring timely delivery and alignment with business objectives.
• Engage with senior stakeholders, providing risk insights and recommendations to enhance internal controls and risk management processes.
• Monitor regulatory developments and emerging risks, advising leadership on potential impacts.
• Support process improvements and automation initiatives to enhance audit efficiency and risk assessment frameworks.

What We re Looking For:

• Strong understanding of internal audit methodologies, risk-based auditing, and industry best practices.
• Experience in conducting technology audits, including cybersecurity, cloud governance, data analytics, and IT risk management.
• Strong analytical, problem-solving, and critical-thinking skills with the ability to assess complex business processes.
• Excellent communication skills (both verbal and written) to engage with senior stakeholders and present audit findings effectively.
• Ability to work independently, manage multiple assignments, and collaborate with cross-functional teams.
• Proficiency in risk assessment frameworks (e.g., COSO, NIST, ISO 27001) and regulatory requirements.

Basic Qualifications:

• Minimum 10-11 years of experience in financial services internal audit or related roles (operational risk, credit risk, compliance risk).
• Experience with integrated audits, electronic work papers and standard productivity tools.
• Strong academic and professional credentials including an undergraduate degree
• Professional certifications preferred (CA, CAMS, CRMA, CISA, CISM, CISSP etc.).