VP - Internal Audit (IT Issue Management)

Location: Bengaluru (hybrid/on-site)

Function: Internal Audit / IT Audit / Technology Risk

Seniority: Vice President

About the Role:

Support independent assurance activities by owning validation, risk evaluation, status monitoring and reporting of technology issues identified in IT audits for a global banking GCC. Manage a location-based issue portfolio and drive closure governance with global audit stakeholders.

This is a hands-on leadership role where your actions directly influence the bank's risk posture and audit outcomes.

Key Responsibilities:

- Own end-to-end validation of remediation for technology audit issues (test step design, risk assessment of controls, evidence review, and conclusion).

- Maintain issue portfolio health, dashboards, and timely escalation to senior management.

- Partner with technology, risk and control owners to challenge root cause, design of remediation and sustainability of fixes.

- Provide direction to junior staff/consultants on complex validation activities, audit methodology and judgment calls.

- Contribute to audit readiness and continuous monitoring for technology issues across the location.

- Collaborate with global audit leadership on reporting, risk evaluation and prioritization of high-risk issues.

Must-Have Experience:

- 7 - 12 years in internal/external audit or risk management, with a clear focus on IT Audit / Technology Risk.

- Last 5 years in IT Audit / Technology risk roles, with supervisory/team lead experience in the last 3 years.

- Proven track record of managing a portfolio of technology audit issues (validation, risk rating, closure governance, reporting to senior management).

- Strong exposure to banking/financial services and related regulatory environment.

- Solid understanding of risk assessment, audit methodology, and frameworks such as FFIEC, NIST, COBIT, COSO.

- Based in/near Bengaluru and willing to work hybrid/on-site from Thanisandra.

Good to Have:

- Professional certifications such as CIA, CPA, CISSP, CISA or equivalent.

Familiarity with areas like:

1. Network infrastructure (firewalls, IDS/IPS, switches/routers)

2. Windows Active Directory

3. Databases (SQL, Oracle, DB2)

4. Cloud, mobile security, and related standards (ISO 27001, NIST, ITIL, etc.)