Role Summary:

Seeking an Internal Audit professional to lead and execute risk-based audits and Internal Financial Controls (IFC)/ICFR reviews across the Financial Services value chain (lending, payments, broking/wealth, asset management, treasury, risk & finance).

The role spans audit planning, walkthroughs, RACM, design & operating effectiveness testing, issue management, and management reporting in line with IIA Standards and internal methodology. Exposure to regulatory control environments and data-led testing is expected.

Key Responsibilities:

Audit Planning & Fieldwork:

- Develop risk-based audit plans and scopes aligned to the annual audit universe, risk appetite, and materiality.

- Conduct process walkthroughs, document RACM (Risk & Control Matrix), identify key controls and control objectives.

- Perform Test of Design (ToD) and Test of Operating Effectiveness (ToE) using sampling, re-performance, and data analytics.

- Prepare workpapers with strong traceability from risk - control - test - evidence - finding.

IFC / ICFR:

- Lead IFC/ICFR scoping and testing for entity-level, process-level, and IT-dependent controls; assess deficiency severity and aggregation.

- Coordinate with Finance/Controllers on financial statement assertions, mapping of significant accounts, and control reliance.

- Support SOX 404 programs for global entities.

Functional Coverage (Financial Services):

- Front-to-back processes: customer onboarding/KYC, credit underwriting, loan disbursals/collections, trade processing, settlements, reconciliations, GL close/financial reporting, treasury & ALM, liquidity, market/credit/operational risk reporting, regulatory reporting.

- Validate key automated / application controls, EUCs, interfaces, reconciliations, access management, change management (in coordination with IT Audit).

Issue Management & Reporting:

- Identify control gaps, root cause, and risk; agree action plans with owners and track to closure.

- Produce concise audit reports with ratings and practical remediation; present to management/committees.

- Execute follow-up/validation testing and maintain issue registers.

Data & Analytics (DA):

- Apply DA to scoping, sample selection, continuous monitoring (exception rules, trend analysis).

- Build repeatable scripts/dashboards using SQL/Alteryx/Power BI/Tableau (or client tools).

Governance & Standards:

- Adhere to IIA International Standards, internal methodology, and QA expectations.

- Maintain awareness of relevant regulations/expectations across financial services (e.g., RBI/SEBI/IRDAI, KYC/AML, operational resilience/BCM, outsourcing/third-party risk, information security/data privacy).

- Support regulatory and external audit interactions, and Internal Audit Quality Assurance reviews.

Must-Have Skills & Experience:

- Demonstrated risk-based internal audit and IFC/ICFR testing experience in Financial Services/Banking/NBFC/ or Big 4/consulting.

- Strong RACM, ToD/ToE, sampling and evidence standards; ability to articulate severity and impact.

- Exposure to front-to-back processes (e.g., lending lifecycle, investment operations, reconciliations, close & reporting).

- Working knowledge of Excel and at least one DA tool (SQL/Alteryx/Power BI/Tableau).

- Clear writing and stakeholder communication; high attention to detail