Assistant Vice President, IT IS Audit

SMFG INDIA CREDIT COMPANY; Thane, Navi Mumbai, Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

SMFG INDIA CREDIT COMPANY is seeking an Information Systems Audit Lead to design and drive the annual IS audit plan, ensuring alignment with business objectives and regulatory requirements.

You will oversee IT audits, review risk assessments and collaborate with IT management, business units and external auditors to address findings and promote cybersecurity awareness across the organization. Relevant certifications are preferred.

Qualifications

• Graduation (Any) with CS engineering preferred.
• Certifications such as CISA, CISSP, CISM are preferred.
• Familiarity with RBI, NHB and ISO 27001 is advantageous.

Responsibilities

• Lead the information systems audits, including risk assessment, scope determination and support to prepare organization's information systems annual audit plan.
• Oversee, participate in audit execution & report preparation of IT audits, application controls audits, Cyber Security audits.
• Review effectiveness of risk assessments, vulnerability assessments and penetration testing by Security team.
• Assess controls, security measures and data protection; evaluate third-party vendor security.
• Ensure compliance with RBI, NHB and ISO 27001 regulations and standards.
• Collaborate with IT management, business units and external auditors to facilitate audits and address findings.
• Prepare and present audit findings and recommendations to senior management with documentation.
• Promote cybersecurity awareness and best practices among staff.

Skills

Information systems auditing

Risk assessment

Regulatory compliance

Education

Graduation (Any)

Engineering in Computer Science preferred

Tools

ISO 27001

NIST

Job description

Role & responsibilities

• Lead the information systems audits, including risk assessment, scope determination and support to prepare organization's information systems annual audit plan, aligning it with business objectives and compliance requirements.
• Oversee, participate in audit execution & report preparation of information Technology audits, application controls audits, Cyber Security audits.
• Review effectiveness of Risk assessments, including vulnerability assessments and penetration testing performed by Security team.
• Assess and evaluate the effectiveness of information systems controls, security measures, and data protection mechanisms. Evaluate the information systems security and controls of third-party vendors and partners.
• Ensure compliance with regulatory requirements (e.g., RBI, NHB) and industry standards (e.g., ISO 27001) in relation to information systems.
• Collaborate with stakeholders across the organization, including IT management, business units, and external auditors, to facilitate audit engagements and address findings.
• Prepare and present audit findings and recommendations to senior management. Maintain comprehensive audit documentation.
• Promote a culture of cybersecurity awareness and best practices among staff.
• Should be updated on emerging technology, trends and assess their impact on the organization's information systems and security.

Preferred candidate profile

Graduation (Any), Engineering in Computer Science preferred Candidates with certifications (e.g., CISA, CISSP, CISM) and familiarity with relevant regulations and standards (e.g., RBI, NHB, ISO 27001, NIST) will be given preferences