Dynamics of the Role

The role will primarily support the maintenance of an effective control environment for the compliance function. S/he will develop and execute a compliance testing program designed to meet regulatory standards and expectations pertaining not only to RBI rules, and regulations but also to laws related to the code of conduct ensuring employee safety and satisfaction.

Roles & Responsibilities

- Perform independent compliance testing, internal compliance reviews & monitoring activities.

- Assist in developing annual compliance plans. Keep abreast of regulatory developments within or outside of the company as well as evolving best practices in compliance control.

- Coordinate with process owners to initiate, scope, plan, and conduct periodic controls assessments to identify areas of risk by evaluating the design and operating effectiveness of Information Technology General Controls (ITGC) over applications, operating systems, and databases as well as the network infrastructure including cybersecurity controls and other guidelines issued by RBI for CIC.

- Lead audit planning, fieldwork (testing and documentation), and reporting.

- Lead engagements and communicate issues to process owners, ensuring their understanding of associated risks and the actions needed to remediate those risks.

- Document the results of audit procedures performed that support the conclusions reached.

- Under the supervision of management, communicate preliminary results to management and obtain validation.

- Prepare audit reports based on the adequacy and effectiveness of controls evaluated.

- Track and monitors open compliance breach issues and conducts post-audit follow-up to evaluate the adequacy of remediation efforts .

- Prepares other ad-hoc reports and assists in special projects as required or requested by supervisor Aware about IT Controls and related compliances.

- Evaluate compliance with Company policies and procedures and regulatory standards.

- Build collaborative working relationships with internal stakeholders (appropriate levels of management) Performs other related duties as assigned.

- Possess excellent time management skills; plan workload appropriately and demonstrate the ability to manage multiple assessments simultaneously Confidently lead meetings to discuss audit issues with finance management, ensuring their understanding of associated risks, root causes, and the actions needed to remediate.

- Operate autonomously and manage tasks at hand without manager intervention Assist in managing regulatory inspections.

- Take ownership of the assigned tasks and interact with other Compliance members in working towards Departmental goals

Experience and Skills:

Qualification: Bachelor's degree in computer science, management information systems or related field.

- 12 - 15 years of experience in an IT Audit, Compliance Testing of IT domain, Assessment, or Information Security role.

- Certification of CA, CPA or CIA (or actively working towards) or other similar certifications would be an added advantage

- Demonstrated in-depth knowledge of concepts, best practices and controls in a breadth of Information Security areas/domains. These include governance & risk management, access control, cybersecurity, physical security, security architecture and design, business continuity/disaster recovery, network security, application & operations security and compliance/incident management.

- Demonstrated ability to understand complex technologies, business processes, regulations and emerging risks.

- Strong technical and/or IT audit background with practical knowledge of a wide variety of technologies including server infrastructure & operating systems, network & web infrastructures, database architecture, vulnerability assessment and intrusion detection/prevention systems.

- Self-starter with the ability to manage and prioritize responsibilities.

- Team players with proven skills in influencing people without having direct management authority.

- Self-driven performer with established skills in tracking self and project performance, anticipating and recognizing problems and escalating issues appropriately.

- Strong ability to interact and communicate both written and verbally with people at all levels, both technical and non-technical, in a dynamic environment where interactions are not always in person.

- Strong risk analysis and problem-solving skills.

- Must be flexible to ensure assessments are performed timely and manage multiple assessments simultaneously.