YES BANK - Information Security Audit Engineer - Change & Incident Management (3-8 yrs)

Core Responsibilities :

- Conduct the IS audits (ITGC controls, VA, PT, APPSEC, NSAR, CA, BCP, DR, Cloud Security, Cyber Security,

-Security Operations and Surveillance, Information security and privacy controls, IT Processes , Data Centre Operations, identity and Access Management, Change Management, Incident Management etc.) across all technology segments

- Assist in implementing risk-based audit plans to ensure safety and soundness of the Bank.

- Ensure completion of assigned audits and documentation of work papers on time.

- Provide improvement/ suggestions to existing process / systems to line management

- Assist in keeping Audit Procedure Manual and checklists current and updated.

Risk and Internal Control Responsibilities :

- Follows risk policy and processes to mitigate the operational, regulatory, financial, informational, reputational and audit risks as instructed by the departmental manager.

- Executes the established internal control systems and compiles relevant information for departmental audits, as necessary.

- Possess strong presentation skills and good working knowledge of applicable regulatory compliances

Technical Competencies :

- ITGC Controls

- Risk assessments

- VA, PT, APPSEC, NSAR, CA

- Information Security standards - ISO 27001

- BCP and DR

- Cloud Security

- Cyber Security

- Security Operations and Surveillance

- Information security and privacy controls

- Banking Technologies

- Certifications-ISO 27001,- CISA / or CISSP, CRISC