Role description

Join Tata AIA Life Insurance, a leading and fastest-growing life insurance provider in India, established in 2001 as a joint venture between Tata Sons Pvt. Ltd. and AIA Group Ltd. Our company embodies a legacy of trust, integrity, and excellence, combining Tata's esteemed leadership with AIA's extensive pan-Asian expertise. At Tata AIA, our vision is to be the pre-eminent protection provider enabling dreams and inspiring healthier, happier lives.

We foster a culture of innovation, inclusivity, and continuous learning, offering dynamic career growth opportunities and a supportive work environment. Recognized as a Great Place to Work and recipient of the Kincentric Best Employer Award, we are committed to employee satisfaction and holistic well-being. Our core value, People - Our Core, emphasizes our dedication to inspiring our employees to be and deliver their very best. Our aim is to attract, hire and develop highly capable leaders who are just, fair, ethical, and accountable for their actions. We strive to provide our employees with the right training, technology, equipment, resources, and guidance to perform their job effectively. Our promise to you is to provide for a diverse, equitable, and inclusive work environment, where each employee is valued as an individual and treated with respect, care, and compassion.

Fuel your future with us, find your wings, and S.O.A.R. - Shape opportunities, Optimize your potential, Accomplish meaningful work, and Reap holistic growth.

A.Position Overview

Position Title	Senior Executive/Assistant Manager
Department	Internal Audit
Level/ Band	251/301

Role Summary:

-The jobholder will assist the Internal Audit (IA) department in executing the strategy pertaining to IT and IS operational, ITAC and ITGC, financial, compliance audits. To ensure successful completion of assigned audit engagements, from start to finish, inclusive of pre planning and wrap up activities and communicate identified issues to ensure any potential concerns are addressed in a timely and effective manner.

B.Organizational Relationships

Reports To	AVP / Sr. Manager Internal Audit
Supervises	Individual contributor

Job Dimensions

Geographic Area Covered

Pan - India. All Departments

Internal Stakeholders

Head of Audit

Senior Management / All Departments - management categories

External Stakeholders

NA

C.Key Result Areas

.Perform risk-based IT audits across Infrastructure, Applications, Information Security, Cyber Security, Cloud, Data Management, Third-Party Risk, and Emerging Technology domains as per the approved audit plan.

.Lead end-to-end audit engagements, including audit planning, scope discussions, kick-off meetings, walkthroughs, risk assessments, fieldwork, control testing, stakeholder interactions, reporting, and audit closure.

.Review previous audit reports and validate closure of outstanding audit observations and management action plans.

.Prepare Risk Assessment Matrices (RAM), identify key risks and controls, and develop audit programs aligned with business, technology, and regulatory risks.

.Assess and audit IT General Controls (ITGCs) across applications, operating systems, databases, network infrastructure, Active Directory, middleware, and virtualized environments, covering Access Management, Change Management, IT Operations, and IT Service Management controls.

.Perform IT Application Controls (ITAC) reviews, including automated controls, interface controls, workflow controls, configuration controls, report controls, and system-generated reports.

.Assess Cyber Security governance and operational controls, including SOC operations, SIEM monitoring, vulnerability management, incident response, threat monitoring, endpoint security, and cyber resilience programs.

.Perform audits of Data Security controls, including data classification, encryption, data loss prevention (DLP), data retention, backup security, and protection of sensitive customer information.

.Evaluate Third-Party and Outsourcing Risk Management controls in line with organizational policies, Information Security standards, and IRDAI requirements.

.Assess compliance with IRDAI Information & Cyber Security Guidelines, Technology Governance requirements, Operational Resilience expectations, and other applicable regulatory obligations.

.Perform compliance, substantive, and control effectiveness testing to assess the adequacy, design, and operating effectiveness of key controls and identify areas of improvement.

.Prepare and maintain audit workpapers, testing documentation, observations, conclusions, and supporting evidence in TeamMate (TM) in accordance with audit methodology and quality standards.

.Identify control gaps, process weaknesses, compliance deviations, and emerging risks recommend practical remediation actions and process improvements.

.Discuss audit observations with business and technology stakeholders, validate factual accuracy, obtain management responses, and draft audit reports as per Internal Audit methodology.

.Present audit findings to audit management, support quality assurance reviews, monitor remediation progress, track closure of audit observations, and participate in special reviews, fraud investigations, business continuity, contingency planning, and risk mitigation initiatives.

.Participate in risk mitigation plans, contingency planning, business continuity programs by executing and reporting within defined timelines. Highlight and recommend process gaps, flaws and process changes.

D.Skills Required

Technical	Strong knowledge of IT Internal Audit methodologies (IIA Standards), risk-based auditing, control testing, and audit documentation. Hands-on experience in IT Audits, ITGC, ITAC, Cyber Security, Data Security, Cloud Security, Network Security, and BCP/DR reviews. Good understanding of Operating Systems, Databases, Active Directory, Applications, Middleware, Network Infrastructure, and IT Service Management controls. Experience in assessing compliance with IRDAI Information & Cyber Security Guidelines, NIST CSF, ISO 27001, ISO 22301, COBIT, CIS Controls, and related technology risk frameworks. Knowledge of SOC, SIEM, Vulnerability Management, Incident Response, Access Management, Change Management, and Third-Party Risk Management. Experience in evaluating technology environments supporting BFSI/Insurance business operations. Proficiency in MS Excel, Word, PowerPoint, TeamMate, Power Bi and data analytics tools. Strong analytical, stakeholder management, report writing, presentation, negotiation, and communication skills.
Behavioral
	Essential	Desired
Interpersonal skills	.
Communication skills	.
Creative thinking skills	.
Supervising/Leadership skills		.
Teamwork Skills	.
Influencing skills		.
Relationship Building skills	.
Decision making skills		.

E.Incumbent Characteristics

	Essential	Desired
Qualification	MBA IT/BE/B.Sc IT/M.Tech	Certification in CISA / CISSP / CIA / ISO 27001 / ISO 22301
Experience	3 - 5 years in IT Audit	Preferably in life insurance / financial / BFSI services sector.

Disclaimer:
Tata AIA Life Insurance does not charge any fees from candidates during the hiring process. If the application aligns with our requirements, you may be contacted for further steps. Verify job offers through official Tata AIA communication channels to avoid fraud. The job description is the sole property of Tata AIA Life Insurance. The content of this JD is confidential, and unauthorized changes or reproduction are forbidden. To know more about Tata AIA Life, click on the weblink:

Senior Executive - Internal Audit