Job Description:

Role & Responsibilities:

Given:

- Increasing exposure to capital markets & collateral risk.

- Rapid digital product rollout & fintech integrations (e.g., Volt Money acquisition).

- RBI-mandated Risk-Based Internal Audit (RBIA).

- The HIA role must go beyond compliance and act as a strategic risk partner, enabling safe scaling.

Reporting Structure:

- Functionally reports to: Audit Committee of the Board (ACB).

- Dotted-line: TBD.

- Independent of all business verticals (credit, sales, fintech, partnerships).

Location:

- Mumbai or Bengaluru.

Role Purpose:

- Lead a technology-enabled, risk-based internal audit function that provides independent assurance on: Governance, Digital & lending risks, Internal controls, Regulatory compliance, and acts as a forward-looking risk intelligence engine for the company.

Key Responsibilities:

1. RBIA Framework & Audit Transformation:

- Build and operationalize RBIA aligned with RBI circular.

- Transition audit from: 1. Transaction testing to Risk-based + process assurance. 2. Periodic audits to Continuous / real-time monitoring.

- Define audit universe across: 1. Lending lifecycle (origination, underwriting, disbursement, collections). 2. Capital markets linked exposure (LAMF / LAS). 3. Fintech platforms & APIs.

2. Digital Lending & Fintech Risk Audits:

- Audit end-to-end digital journeys: Instant approvals, API integrations, KYC flows.

- Review: 1. Algorithm-based underwriting / rule engines. 2. Credit decision models (model risk). 3. Data integrity, lineage, and governance.

- Conduct: 1. ITGC, cybersecurity, and data access/control audits. 2. Third-party / fintech partner audits.

3. Credit, Market & Collateral Risk Oversight:

- Audit: 1. Loan Against Mutual Funds / Securities exposure. 2. Margining, collateral valuation, liquidation triggers.

- Evaluate: 1. Stress scenarios (market volatility impact). 2. Concentration risk (FSG / wholesale exposure).

- Independently validate risk appetite vs actual risk-taking.

4. Enterprise Risk-Based Audit Planning:

- Develop dynamic risk assessment model incorporating: Portfolio growth & product expansion, New fintech integrations, Regulatory changes.

- Prepare annual + rolling audit plans.

- Use: Risk Control Matrices (RCMs), Internal Financial Controls (IFC) frameworks.

5. Governance, Regulatory & RBI Compliance:

- Ensure compliance with: RBI NBFC guidelines, Digital lending norms, Outsourcing & third-party risk regulations.

- Interface with: RBI inspections, Statutory and external auditors.

- Ensure strong documentation for regulatory scrutiny.

6. Continuous Monitoring & Analytics:

- Build data-driven audit capability: Exception dashboards, Early warning signals, Portfolio risk triggers.

- Implement tools (SQL / Power BI / audit analytics).

- Move toward real-time audit assurance models.

7. Audit Delivery & Board Reporting:

- Present to ACB: Risk heatmaps, Emerging risks (fintech + market linked), Persistent control gaps.

- Ensure: Actionable, insight-driven reporting, Highlight unresolved high-risk observations consistently.

8. Business Partnering:

- Act as a trusted advisor to leadership: Product launches, New partnerships (LSPs, fintechs).

- Ensure risk is embedded at design stage, not post-facto.

9. Team Leadership & Capability Building:

- Build a hybrid audit team: Financial auditors, Data analysts, IT / cyber audit specialists.

- Upskill team in: Digital lending ecosystems, Analytics-based auditing.

Eligibility Profile:

- 8+ years in: NBFC / Bank / Fintech internal audit.

- Must-have: Digital lending / fintech exposure, RBI compliance experience.

- Strong experience in: Risk-based auditing, IT / data analytics audits.