AVP -Technical IT Internal Audit (Cybersecurity & Cloud Infrastructure

Hipotz; Bengaluru; Presencial; INR 5 000 000 - 7 000 000; Tempo integral

Resumo da oferta

Hipotz in Bengaluru seeks an AVP IT Audit to lead the technical audit function within the global Internal Audit group. You will own the end-to-end audit lifecycle—from scoping and walkthroughs to fieldwork and remediation—across cloud, network security, IAM, databases, and AI governance.

The role requires hands-on, pure technical 3LOD IT audit experience with strong analytical skills and the ability to interact with senior management on risk implications and remediation plans.

Qualificações

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or related technical discipline.
• CISA certification required or strongly preferred; CISM, CISSP, or ISO 42001/27001 certifications are an added advantage.
• 5+ years of direct experience in internal IT audit, IT infrastructure audit, or technology risk management within Financial Services, Investment Banking, or Big 4 Tech Risk consulting practice.
• Analytical and soft skills: professional skepticism, strong critical thinking, negotiation skills, and proficiency in audit data analytics tools (SQL, Alteryx) and MS Office.

Responsabilidades

• Lead walkthrough meetings and interviews to understand architecture, evaluate processes, identify risks, and establish audit scopes and testing programs.
• Evaluate the design and operating effectiveness of technical infrastructure controls, identifying weaknesses and assessing business impact.
• Prepare standalone, high‑quality audit workpapers and lead sheets describing tested control attributes and findings.
• Maintain strict adherence to internal audit methodologies and global regulatory expectations.
• Audit AI applications and emerging tech governance, evaluating model lifecycle governance, data protection, prompt security, and AI risk controls.
• Present findings to Audit Management and stakeholders, negotiate remediation plans, and validate issue closure.

Conhecimentos

Audit data analytics

SQL

Alteryx

MS Office

Formação académica

CISA (Certified Information Systems Auditor)

Ferramentas

MS Excel

PowerPoint

Descrição da oferta de emprego

The AVP IT Audit is a technical audit lead role within the global Internal Audit function, responsible for executing independent, objective assurance activities to evaluate the effectiveness of the organizations governance, technology risk management, and internal control environment.

Reporting directly to an Audit VP or Director, you will independently own and deliver the end-to-end audit lifecyclefrom scoping and walkthroughs to fieldwork execution, standalone workpaper documentation, reporting, and issue remediation—across cloud, network security, Active Directory, and AI governance domains.

Key Responsibilities

• Audit Lifecycle Execution: Lead walkthrough meetings and interviews with business and technical stakeholders to understand architecture, evaluate processes, identify risks, and establish audit scopes and testing programs.
• Control Testing & Evaluation: Evaluate the design and operating effectiveness of technical infrastructure controls, identifying control weaknesses and assessing business impact.
• Workpaper Excellence: Prepare standalone, high-quality audit workpapers and detailed lead sheets describing tested control attributes and findings in a clear, re-performable manner.
• Methodology & Regulatory Alignment: Maintain strict adherence to internal audit methodologies, professional auditing standards, and applicable global banking regulatory expectations.
• Emerging Tech & AI Risk: Audit artificial intelligence applications and emerging technology frameworks, evaluating model lifecycle governance, data protection, prompt security, and AI risk controls.
• Stakeholder Management & Issue Resolution: Present audit findings and risk implications to Audit Management and business stakeholders, negotiate actionable remediation plans, and validate issue closure.

Technical Domains & Scope

Candidates are expected to possess strong working knowledge and hands‑on auditing experience across the following technical pillars:

1. Cloud & Emerging Technologies: Cloud security architecture, Cloud Security Posture Management (CSPM), Privileged Access Management (PAM), Zero Trust architecture, and Artificial Intelligence governance frameworks.
2. Network Security Infrastructure: IP network topology, switches, routers, firewalls, and Intrusion Detection / Prevention Systems (IDS/IPS).
3. Identity & Access Management (IAM): Windows Active Directory, Azure AD, and LDAP policies, structure, Group Policy Objects (GPOs), and privilege management.
4. Databases & Storage: SQL, Oracle, DB2, and database security parameter/access monitoring tools.
5. Endpoint & Data Protection: Mobile Device Management (MDM), Data Leakage Prevention (DLP), and Bring Your Own Device (BYOD) security controls.
6. Governance Standards: Direct application of industry standards including CoBIT 5, ITIL, NIST CSF, and NIST AI RMF.

Required Qualifications & Experience

• Education: Bachelor’s degree in Computer Science, Information Systems, Engineering, or related technical discipline.
• Professional Certifications: CISA (Certified Information Systems Auditor) required or strongly preferred; CISM, CISSP, or ISO 42001/27001 certifications are an added advantage.
• Experience: Minimum of 5+ years of direct experience in internal audit, IT infrastructure audit, or technology risk management within Financial Services, Investment Banking, or Big 4 Tech Risk consulting practice.
• Analytical & Soft Skills: Professional skepticism, strong critical thinking, written/verbal negotiation skills, and proficiency in audit data analytics tools (e.g., SQL, Alteryx) and MS Office tools

IMPORTANT PROFILE NOTE:

This is a hands‑on, pure technical 3LOD Internal Audit role. It is NOT a SOX 404 / ITGC compliance role, nor an administrative project management role, nor a 1LOD/2LOD SecOps operational role.