Chief Manager - Internal Audit

• Perform independent appraisals of the adequacy and effectiveness of Technology controls.
• Review controls in the areas such as Network Security, Cloud Technology, IT Infrastructure, IT Application controls, Cyber Security, Business continuity & Disaster recovery, IT Architecture, DevOps etc.
• Provide timely reports to the Head of Department on the results of audits, examinations and investigations of IT function.

Role & Responsibilities:

Internal Audit Plan

• Conduct technology focused audits independently.
• Ensure timely completion of audits based on annual audit
• Plan and perform adhoc reviews with adequate risk coverage.
• Understand systems and processes to identify risks.
• Control design adequacy and operating effectiveness
• assessment as per standard process
• Report audit findings to stakeholders and agree on action plans.
• Monitoring and tracking closure of open audit observations
• Help stakeholders with recommendations to mitigate risks / issues identified
• Maintain audit documentation as per established processes.
• Contribute to the continuous improvement of Internal Audit and control processes

Stakeholder Management

• Collaborate with the teams / stakeholders for better understanding of the business and smooth execution of audit deliverables
• Coordination with Enterprise Risk Management team (2nd line of defense)
• Responsible for managing multiple priorities, deadlines and quality deliverables and participate in cross functional teams (CFTs) and make notable contribution for overall success of the Project.

Team Management

• Provide technical assistance and subject-matter expertise to team members in designing risk universe and identifying new risk areas.
• Responsible for coaching, mentoring, and developing career paths for direct reports

Preferred Candidate Profile:

• CISA/ CISSP / CEH - Preferred
• 10+ years of IT Internal Audit to review risks and assess controls in areas such as Cyber Security, Business Continuity & Disaster recovery, ITGC, IT infrastructure, Cloud Technology, ISO27001 etc