Assistant Manager - IS Auditor

mPokket; Bengaluru; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

mPokket Financial Services Private Limited is seeking an IS Audits professional to develop and drive the IS Audits strategy across IT Infrastructure, Security and Applications. The role emphasizes risk assessment, regulatory alignment, and proactive remediation through data-driven review processes.

The candidate will conduct IT application reviews, manage audit plans, and provide actionable recommendations to enhance information security, data privacy, and governance across the organization.

Qualifications

• Bachelor's degree in Computer Science or Business-related field; at least 3 years of experience directly related to the duties and responsibilities specified.
• Certification/Licensure: CISA, CIA, or CPA.

Responsibilities

• Develop the IS Audits strategy covering IT Infrastructure, IT Security and IT Applications Audits.
• Develop IS Audits plan based on risk assessment and regulatory framework.
• Conduct IT application reviews and specialized reviews using data analysis.
• Manage and execute the audit plan for remediation of Information System & Security risks.
• Provide recommendations to improve organization policies, processes and practices.
• Identify risk hotspots and conduct unplanned reviews as needed.
• Implement continuous monitoring for risk across products and processes.
• Engage with stakeholders to implement recommendations and improve the control environment.
• Communicate and report to regulators, board committees and senior management.

Skills

IS Audits

IT Security

Data Security

Cyber Security

Cloud Security

Vulnerability Assessment

Penetration Testing

Network Security

Data Privacy

IT Disaster Recovery

IT Project Management

Regulatory Reporting

Stakeholder Engagement

People Management

Education

Bachelor's degree in Computer Science or Business-related field

Job description

• Develop the IS Audits strategy encompassing Information Technology (IT) Infrastructure, Information Security and IT Applications Audits covering the key Information System areas (such as Cyber Security, Applications Security, Data Security, Cloud Security, Vulnerability Assessment &Penetration Testing, Network Security, Data Privacy, Data Centre, Logical and Physical Access Management, IT Infrastructure management, Database & Operating System management, Incident management, Change management, Email management and process review, End point security, IT Disaster Recovery, IT Business Process Continuity Review, IT Helpdesk management, IT Project management and Emerging Digital & Technology Risk).
• Develop strategies for identification and assessment of Information System & Security risks
• Develop IS Audits plan based on risk assessment and the legal, regulatory framework
• Conduct IT application reviews Conduct specialised reviews through use of extensive data analysis.
• Effective management and execution of the audit plan for proactive identification and remediation of Information System & Security risk relating to various business products
• Provide effective recommendations for improvements to the organization policies, processes and practices.
• Develop strategies for identification of triggers / risk hotspots and conduct unplanned reviews / investigations based on various triggers/ hot spots, directives received from regulators, board committees and senior management
• Implement an effective continuous monitoring framework for ongoing monitoring of risk relating to various business products, processes and units
• Active engagement with stakeholders for implementation of recommendations for effective risk mitigations and improvement in the control environment
• Effective communication and reporting to various stakeholders including regulators, board committee and senior management People Management

Bachelor's degree in Computer Science or Business-related field; at least 3 years of experience directly related to the duties and responsibilities specified.

Certification/Licensure Cert Information Systems Auditor (CISA), OR Cert Internal Auditor (CIA), OR Cert Public Account (CPA).