Internal Audit:Senior Auditor - Information Systems Audit

About Department

Internal Audit function of the Bank, operates independently under the supervision of the Audit Committee of the Board and is responsible for providing an independent view to the Board of Directors and Senior Management on the quality and efficacy of the internal controls, risk management systems, governance systems and processes in place on an on-going basis. This is provided to primarily ensure that the business and support functions are in compliance with both internal and regulatory guidelines

About the Role

To conduct Information Systems Audit for the Bank.

Key Responsibilities

.Planning the audit, developing clear and concise risk/control matrices and audit programs, and reporting
.Demonstrate professionalism, competence and clarity of communication when dealing with the IT stakeholders
.Demonstrate reasonable knowledge of the industry or sector and be aware of technical issues or audit risks

Qualifications

.Graduates/CAs/MBA with relevant certification such as CISA / CISM / CISSP / CIA
.5-15 years of work experience with prior experience in Internal or Statutory Audit / Risk Management / Regulatory / Compliance roles in the financial services (Banking, NBFC) industry

Role Proficiencies:

Experience in conducting Information Systems and Security audits, application control reviews and application functionality reviews - Strong knowledge of regulations and circulars released by regulatory bodies (RBI, SEBI etc.) - Practical experience of audit methodology - Good written and oral communication skills - Good logical and reasoning skills - The ability to work effectively in team

Technical skill set for Information systems auditor should have:
.Solid base of computer skills in hardware and software
.Knowledge of various operating systems
.Knowledge of Databases
.Hands on experience on Network Architecture
.Knowledge of other IT infrastructure
.Application controls and Interfaces
.Knowledge on Computer Assisted Audit Techniques (CAATs)
.Knowledge on Information security governance
.Knowledge on Business Continuity and Disaster Recovery framework

Professional Certifications: CISA, CISM, CISSP, CEH, ISO 27001, ISO22301