Auditor/Manager - Payment System - Bank

Payment System Auditor-Manager

Urgently hiring for one of the leading banks in there IT department Managers.

- 5-8 years of experience in the field of Information Systems (IS) Audit with focus on payment systems such as SWIFT, UPI, IMPS, ATM, Internet Banking, Mobile Banking, Core Banking System

- Should have security technologies implementation or security audit experience in the payment systems

- Preparing checklist for review of payment systems for information security risk

- Conducting reviews of business processes to identify material information security risks

- Performing root cause analysis on identified risk events to recommend improvements to prevent these risk events from re-occurring in future

- Review the action plans for mitigating the identified risks and track the closure

- Maintaining a register for the identified risks

- Experience in Audits and Risk assessment services of IT infrastructure, Applications, IT processes, Business Continuity and Governance

- Candidate should have hands-on experience in Test of design controls and Test of operating effectiveness review of IT operational controls

- Candidate should be familiar with Technical Security controls of Identity & Access Management, Network, Server, Application and process controls reviews

- Must have experience in conducting risk assessment of business and support applications

- Must have undertaken PCI-DSS security assessment or consulting engagements with in depth expertise

- Experience in assessing security controls of wearables technologies, contactless cards, PPIs, payment aggregators, payment fraud risk controls is highly preferred

- Must have experience in preparing quality deliverables such as audit reports, presentations etc.

- Excellent written, oral communication and presentation skills

- Excellent organizational and interpersonal skills

- Ability to work independently or as part of a team

Responsibilities :

- Conduct Information System audits for regulated entities as per the schedule with a focus on payment systems such as SWIFT, UPI, IMPS, ATM, Internet Banking, Mobile Banking, Core Banking System

- Identify the opportunities for and contribute towards the continuous improvement of the audit process and service

- Identify and draft thought leadership articles pertaining to technology aligned operational and other categories of risk

- Support in maintaining audit checklist and documents, trend analysis, preparing presentations etc.

- Should be a self-learner and must keep updated with new regulations, developments and technologies related to cyber security

- Review/Assess the security architecture, IT security controls for compliance against published framework and standards

- Audit IT processes including change management, configuration management, backup management, identity & access management, capacity management and security incident management

- Review the Information System Management System (ISMS), Business Continuity Plan including Disaster

- Recovery activities carried out by the regulated entities

- Conducting review of operations risk documents

- Conducting audits of business processes to identify information security risk

- Conducting audit of Information security policies, procedures and processes to identify design gaps

- Prepare audit reports and submit for review

- Candidate will have to travel extensively within Mumbai and across the country for performing audits