Deputy Vice President - Information Security Audit - Public Sector Bank

1.Audit Planning & Execution Assist in developing the annual IS audit plan based on risk assessment and regulatory priorities. Lead and supervise IS audits across applications, infrastructure, cybersecurity, and digital banking platforms.

2. Risk-Based Auditing Conduct risk-based audits of IT systems, data centers, cloud environments, and third-party service providers. Evaluate controls related to data integrity, access management, change management, and system resilience.

3. Cybersecurity & Compliance Review Assess the effectiveness of cybersecurity controls and incident response mechanisms. Ensure compliance with RBI guidelines, ISO 27001, IT Act, and other applicable standards.

4. Audit Reporting & Follow-Up Prepare detailed audit reports with observations, risk ratings, and actionable recommendations. Monitor and follow up on the implementation of audit findings and corrective actions.

5. Coordination with Stakeholders Liaise with IT, Information Security, Risk, and Compliance departments during audits. Support external audits and regulatory inspections by providing required documentation and clarifications.

6. Process Improvement & Advisory Identify gaps and suggest improvements in IT governance, security architecture, and operational processes. Provide advisory support for new technology implementations and digital transformation initiatives.

7. Team Leadership & Development Guide and mentor audit team members in technical areas and audit methodology. Conduct training sessions on emerging technologies, audit tools, and regulatory updates.

8. Use of Audit Tools & Automation Promote the use of automated audit tools, data analytics, and continuous monitoring techniques. Support the integration of audit management systems for better tracking and reporting.

Educational Qualification : B.E./B.Tech in Computer Science, IT, Electronics, or equivalent discipline OR MCA / M.Tech / M.Sc. in relevant fields from a recognized university/institution

Certifications : Mandatory: CISA (ISACA), CEH (EC Council), ISO 27001 Lead Auditor (NABCB-accredited body) Desirable: CISSP (ISC2)

Minimum 15 years in BFSI / IT / Information Security Consultancy with at least 5 years in IS Audit / Cybersecurity Audit leadership roles Experience in handling Red Team exercises, VAPT, and regulatory audits preferred

Age-Min: 40 Yrs Max: 55 Yrs