Audit Executive-Information Technology

Idfc First Bank Limited; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

IDFC FIRST Bank in Mumbai seeks an Audit Executive – Information Technology to lead IT audits within Internal Audit. You will own end-to-end audit processes—from planning to reporting—ensuring compliance with internal and regulatory guidelines and strengthening risk governance.

The role requires 5–7 years IS auditing experience in banking, BE/B.Tech or BSc CS/IT, and solid IT security and controls expertise. This is an on-site Mumbai-based role with opportunities to drive automation.

Qualifications

• Engineering graduates with IT/CS background and relevant banking exposure.
• Minimum 5–7 years of IS auditing and risk assessment experience.
• Strong understanding of IS/IT auditing principles and practices.

Responsibilities

• Audit IT systems and functions independently.
• Plan, scope and resource complex audits with risk assessments.
• Evaluate IT infrastructure and information systems for complexity and reliance.
• Review general and application controls across computer systems.
• Assess security measures for systems under development or enhancement.
• Conduct reviews covering Cyber Security, cloud, data security and third-party risks.
• Prepare audit reports and present issues to stakeholders with action plans.
• Follow up on audit findings and recommendations.

Skills

IS Auditing

Risk Assessments

Data Analysis

Reporting

Cyber Security

IT Governance

Communication

Education

BE/B.Tech or B.Sc CS/IT

Tools

Audit Automation Tools

Cloud Technologies

Security Frameworks

Job description

Job Title: Audit Executive - Information Technology

Department/Function: Internal Audit

Job Purpose

As an Audit Executive – Information Technology within the Internal Audit function, you will be responsible for independently managing internal audits of the bank’s technology systems and processes. This includes end-to-end ownership of the audit process—from planning and execution to reporting and presentation. You will ensure compliance with internal & regulatory guidelines, enhance audit efficiency, and contribute to the bank’s broader risk management and governance objectives.

Roles & Responsibilities

• Conduct internal audits of the bank’s IT systems and functions as assigned.
• Plan, scope, and resource complex audit projects, including risk assessments.
• Evaluate the bank’s information systems environment to determine system complexity and reliance.
• Perform general and application control reviews for a range of computer information systems using a risk-based approach.
• Review internal control procedures and security measures for systems under development or enhancement.
• Conduct information control reviews covering Cyber Security, system development standards, operating procedures, system security, programming controls, communication controls, backup and disaster recovery, Cloud Technologies, Data Security and Privacy, Third Party Risks.
• Prepare Audit reports and present issues to stake holders ensuring all critical issues and action plans are included and highlighted.
• Actively follow up on compliance with audit findings and recommendations.

Secondary Responsibilities

• Stay updated on current technological trends and developments relevant to IT auditing.
• Evaluate IT infrastructure and security solutions implemented across the bank.
• Compile data and prepare comprehensive audit reports.
• Communicate findings and recommendations clearly, both verbally and in writing.
• Promote a culture of collaborative learning and shared responsibility within the audit team.
• Adoption of audit automation tools and methodologies to streamline control assessments.

Educational Qualifications

Graduation: Engineering Graduate (BE/B.Tech), or B.Sc with Computer Science / IT background

Experience

• Minimum 5 to 7 years of relevant experience in IS Auditing, Risk Assessments preferably within the banking or financial services sector.
• Strong understanding of IS/IT auditing principles and practices.
• Ability to assess distributed production and application systems.
• Proficiency in evaluating IT infrastructure and security frameworks.
• Excellent data gathering, analysis, and reporting skills.