Role Overview:

As an AVP - IS Audit, you will spearhead the information systems audit function, serving as a critical bridge between technical infrastructure and organizational risk management. You will lead high-impact audits, evaluating the design and operational effectiveness of IT controls across complex business environments. Working closely with senior leadership, IT stakeholders, and external auditors, you will ensure that the organization's digital assets remain secure, compliant, and resilient. Your work directly influences the company's risk posture, providing the board and executive management with the assurance needed to drive strategic growth while maintaining robust data privacy and cybersecurity standards.

Key Responsibilities:

- Lead end-to-end IT audit engagements, including planning, execution, and reporting, to provide independent assurance on the effectiveness of IT governance and control frameworks.

- Design and implement comprehensive IT risk management strategies that align with business objectives to mitigate vulnerabilities in critical infrastructure.

- Oversee SOX compliance programs and IT general controls (ITGC) testing to ensure accurate financial reporting and regulatory adherence.

- Collaborate with cross-functional teams to monitor and remediate findings related to data privacy, cyber security, and IT compliance, ensuring timely closure of audit issues.

- Provide strategic advisory to management on emerging technology risks, including cloud security, digital transformation, and third-party risk management.

- Mentor and develop a high-performing audit team, fostering a culture of technical excellence and continuous improvement in audit methodology.

Required Skillset:

- Possess 8 - 12 years of progressive experience in IT audit, risk management, or information security within a large-scale enterprise or a top-tier consulting firm.

- Demonstrate deep expertise in frameworks such as COBIT, ISO 27001, and NIST, coupled with a strong understanding of IT controls and regulatory requirements.

- Hold professional certifications such as CISA or CISM, which serve as a testament to your technical proficiency and commitment to the audit profession.

- Exhibit exceptional stakeholder management skills, with the ability to communicate complex technical risks to non-technical leadership and influence decision-making.

- Display a proactive approach to problem-solving, with the agility to navigate a hybrid work environment in Mumbai while managing multiple high-priority audit cycles.

- Maintain a sharp analytical mindset, capable of interpreting data privacy regulations and translating them into actionable audit procedures that protect organizational integrity.