Purpose of the Job:

The incumbent will be responsible for conducting and monitoring Information Systems audit for the bank.

Total Experience: 10 - 12 years

Responsibilities:

- Carry out Information System (IS) Audit planning using the Risk Based Audit Approach.

- The approach involves IT risk assessment methodology, defining the IS Audit Universe, scoping and planning the audit, execution and follow up activities.

- Assist in the preparation of the annual IS Audit Plan and strategy in compliance with external regulatory requirements and IS Auditing Standards for Audit Committee approval.

- Handle independent execution of IS audits and IT Application audits within the bank and Vendor onsite/offsite IS audits.

- Responsible for follow up and closure on Audit Tracking Reports (ATR).

- Assist in reporting on the status of planned versus actual IS audits to the Audit Committee and Senior management.

- Establish a quality assurance process to understand the auditee's needs and expectations.

- Close co-ordination and oversight on the work performed by external IS audit partners.

- Promote and enhance utilization of CAATs to increase the efficiency and effectiveness of the audit.

- Assist in initiatives taken by Internal Audit and special projects.

Key competencies:

- Understanding of IS Audit Universe to ensure holistic coverage across Application Systems, Information, Infrastructure, and People.

- Understanding of audit and risk aspects related to IT Governance, IT Operations, IT Outsourcing, Application Control & Security, Pre and post implementation application control audits, data migration audits, Change Management, Logical Access, BCP/DR, and Data centre controls.

- Strong understanding of the regulatory framework and guidelines applicable to Information Technology and Information Systems Audit for Banks.

- Relevant knowledge of Information Systems, IS Controls and leading audit practices.

- Ability to assess the ultimate impact of deficiencies identified in the IT Internal Control framework.

- Understanding of various fraud risk factors and ability to assess associated risks and controls.

- Ability to exercise due professional care following professional auditing standards.

- Competence, skills, knowledge, training and relevant experience in technology and IS audit domain.

Educational Level:

- B.E/B.Tech/MCA, Master's Degree.

- Certifications like ISO27001/ CISA / CIA / Certified Cyber Security will be an added advantage.