Lead- IT Audit - NBFC/Big4/Bank (14-20 yrs)

Job Title: Lead IT Audit - NBFC

Location: Mumbai

Key Responsibilities:

- Individual will be responsible for assessing our IT systems, identifying vulnerabilities, and recommending risk-mitigation strategies. IT auditor plays a crucial role in helping the organization manage IT risks, safeguard assets, and ensure compliance with relevant laws, regulations, and industry standards.

Responsible to conduct following audits:

- IT Application Audit - Access, Change, Incident management, Interface, Application Security controls, SLA and vendor agreement, capacity management.

- IT Infra & Governance Audit - Asset inventory classification control, Review Policy and procedures, implementation of policy, compliance of RBI guidelines, review resource management.

- IT Vendor Audit - Infrastructure and security control, human resource, performance.

- Billing, policy / guideline compliance, system access control Thematic Audit.

- Cybersecurity Audits: Conduct comprehensive reviews of our network infrastructure and applications. Provide needful recommendations for upgrading the organization's data security measures

- Technology Risk Assessment: Evaluate effectiveness of controls related to IT governance, data integrity and disaster recovery.

- Assessing requirements for information security & compliance and implement solutions in accordance with organizational security framework.

- Work closely with the other INA leaders to integrate IT audit findings into our overall risk assessment.

- Work with co-sourced partners on RBI mandated annual audits of IT and information system.

- Must keep pace with technological advancements and assess their impact on our business.

- Education - MBA with experience in IT Audit. CA will be an added advantage.

- Certification - CISA or equivalent certification is mandatory.

- Industry - Bank/ NBFC/ Big 4 (FS Clients).

- Must have handled IT audit from FS perspective, knowledge of RBI Guidelines, exposure to data governance, IT governance, Ops risk management