Senior Role - IT Audit & Compliance

Position: Senior Role into IT Audit & Compliance

Location: Goregaon, Mumbai

Exp: 16-24yrs

Education Qualifications: BE/B-Tech (CSE, ECE/IT) or M.E/M-Tech or MCA/MSc (CS).

Certifications: CISSP, CISA, CISM, ISO Lead Auditor and/ or security products Certifications.

Key Skills: Cloud security assessments, Application security testing, IT compliance, Information Risk assessment, IT Audits / Cyber security Audits, ISO 27001, PCIDSS

Job Role:

1. Direct and approve planning, execution and reporting of IT compliance assurance reviews and compliance and regulatory issue validation activities for IT component of NPCI products, functions or legal entity at the regional or country level.

2. Provide supervisory oversight over reporting of IT compliance assurance reviews and IT compliance and regulatory issue validation activities

3. Lead a valued interactive program of support and assurance that provides stakeholders insight into IT compliance trends, themes, issues and root causes.

4. Approve resource requirements and budgets for IT compliance related projects

5. Serve as assurance owner for complex IT reviews, analyze report findings and recommend appropriate interventions when needed

6. Analyze and provide credible challenges to relevant assessments of IT control environment including Risk and Controls Self-Assessment (RCSA) , Internal Audit IT assessments (and related control metrics, on-time remediation, Regulatory Issues (and its metrics), Compliance Assurance Results and Legal Matters.

7. Review and Approve IT Compliance Risk Assessments

8. Identify and evaluate emerging IT risks and present findings to the Board

9. Participate in the development and approve the enhancements to the Compliance methodology and Standards for IT auditing, testing, monitoring and reporting with focus on compliance risk

10. Develop and implement the strategy to effectively utilize innovative compliance testing solutions including Data Analytics to increase value and reduce costs of compliance related activities

11. Provide IT insight to the state of compliance at NPCI

12. Inform senior management of the IT compliance matters that require their attention or action.