Position: Assistant Vice President - IS Audit

Role Overview

We are seeking an experienced Assistant Vice President - Information Systems Audit professional to strengthen the organization's cyber security governance and IT audit framework. The role involves conducting IS Audits, Cyber Security Audits, and IT compliance reviews across various banking systems, ensuring adherence to regulatory guidelines and industry best practices.

The candidate will play a key role in identifying technology risks, evaluating security controls, and recommending remediation measures to enhance the bank's information security posture.

Key Responsibilities

Information Systems & Cyber Security Audits:

- Conduct IS Audit, Cyber Security Audit, Continuous IS Audit, and IT Outsourced Activity Audit as part of the IS Audit team.

- Perform compliance audits to ensure adherence to internal IT policies, regulatory guidelines, and global best practices.

- Evaluate IT infrastructure, networks, servers, databases, and operating systems for security vulnerabilities.

- Conduct migration audits, special audits, and regulatory compliance reviews.

Risk & Compliance Management:

- Assess information security risks and identify control gaps across banking systems.

- Ensure compliance with RBI guidelines, cyber security frameworks, and digital payment security controls.

- Recommend remedial measures and security improvements to mitigate technology risks.

Audit Planning & Reporting:

- Ensure timely execution of audit plans and completion of audit assignments.

- Prepare detailed audit reports highlighting vulnerabilities, risks, and recommendations.

- Follow up with auditee teams for compliance submissions and evidence-based closure of audit observations.

- Submit periodic audit reports to senior management and regulators.

Team Leadership & Knowledge Development:

- Lead and guide the IS Audit team during audit engagements.

- Develop and update technical audit checklists for network devices, servers, and operating systems.

- Contribute to knowledge sharing and skill enhancement within the audit team.

Key Result Areas (KRAs)

- Timely execution of planned and unplanned IS audits.

- Effective monitoring and closure of audit findings and compliance reports.

- Submission of periodic audit and regulatory reports.

- Strengthening the bank's cyber security governance framework.

- Continuous review and enhancement of audit methodologies and standards.

Eligibility Criteria

Educational Qualifications

Candidates must possess any of the following qualifications with minimum 50% marks from a recognized university/institution approved by Government of India:

- B.E. / B.Tech. in Computer Science / IT / Electronics / Software Engineering

- B.Sc. in Computer Science / IT / Electronics

- BCA / MCA

- M.Tech. / M.Sc. in Computer Science / IT / Electronics

Professional Certifications (Preferred)

The following certifications will be considered an advantage:

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

- Certified Information Systems Security Professional (CISSP)

- Diploma in Information Systems Audit (DISA)

- ISO 27001 Lead Auditor

- Certified Ethical Hacker (CEH)

- GIAC Certification (Certifications must be valid as of the last date of application.)

Experience Requirements

- Minimum 6 years of experience in BFSI / IT / Information Security Consulting.

- At least 3 years of hands-on experience in IS Audit / Cyber Security Audit / Information Security Consulting.

- Experience in internal audit teams or external IT audit engagements.

Relevant Exposure:

- Conducting IS or cyber security audits.

- Working with Security Operations Center (SOC) teams.

- Performing information security risk assessments.

- Conducting quality assurance audits for Core Banking Systems, Internet Banking, Mobile Banking, and Fintech platforms.

- Note: Training or teaching experience will not be considered for eligibility.

Technical Skills

Hands-on experience with Vulnerability Assessment & Penetration Testing (VAPT) tools such as:

- Nessus

- Retina

- SAINT

- Kali Linux

Knowledge of:

- Data Privacy Standards

- Digital Payment Security Controls

- Cyber Security Risk Management

- Banking IT regulatory frameworks

Key Competencies

- Strong analytical and risk assessment skills

- Expertise in IT audit frameworks and cyber security controls

- Ability to lead audit teams and manage audit engagements

- Strong documentation and reporting capability

- Knowledge of banking technology infrastructure