CISO - Internal Audit

Essar Group; Mumbai; On-site; INR 1,800,000 - 3,200,000; Full time

Benefits offered by this job

(none)

Job summary

Essar Group in Mumbai seeks an experienced IT Audit and Information Security leader to drive risk-based audit planning and assurance across technology domains. You will coordinate with internal teams and external auditors to strengthen controls and drive regulatory compliance.

The role requires 10–12+ years in IT audit or technology risk, with CISM/CISSP/CISA preferred and strong SAP audit capabilities. An analytical, proactive professional is essential.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or related field.
• CISM/CISSP/CISA certifications preferred; additional qualifications are a plus.
• 10–12+ years of IT Audit, Technology Risk or Information Security experience.

Responsibilities

• Develop and execute a comprehensive IT audit strategy aligned with organizational objectives.
• Establish risk-based IT audit plans covering applications, infrastructure, cybersecurity, and emerging tech.
• Lead end-to-end IT audits including planning, fieldwork, reporting and follow-up.
• Assess IT general controls, application controls, and change management processes.
• Present findings to executive management and the Audit Committee.
• Collaborate with IT and business leaders for timely remediation.
• Maintain relationships with external auditors and regulators.

Skills

IT risk governance

InformationSecurity

Cybersecurity

SAP systems

Audit tools

MS Excel

Analytical skills

Education

Bachelor’s degree in IT/CS

CISM

CISSP

CISA

Tools

SAP-MM

SAP-FI

SAP-SD

Audit tools

MS Office

Job description

Main objective being –

• Undertake CISO role any ensure regular monitoring of email communication,USB,any other policy exceptionetc.

• Internal audit system/IT audit co-ordination and driving quality of audit with business and internal audit firms.

• Objectively review business IT risk leading to business risks and help in mitigation etc.

• Review and drive control related automation IT infrastructure, application, SAP configuration controls audits. Help management in improvement of efficiency of operation.

• Protect against loss/fraud by establishing process of red flag, exception reporting/data analytics etc. Pro-active internal audit intervention for control improvements/automated controls.

Key Challenges

• Developing and maintaining information security monitoring and audit processes and controls that meet requirements of control framework without compromising business growth and operational efficiency

• Incumbent takes decisions on operational aspect of the audit programme to be exercised.

• Role for developing effective operating systems

• Role to support and exploit synergies and maximise value from audit deliveries

• Lead automation and IT audits in order to have pro-active audit intervention etc.

  Interactions: Internal Interactions-Functional HOD’s on an assignment basis and support team etc. interaction at all level, External, vendor etc. where required.

Key Responsibilities

• Develop and execute a comprehensive IT audit strategy aligned with organizational objectives and regulatory expectations.

• Establish risk-based IT audit plans covering applications, infrastructure, cybersecurity, digital initiatives, and emerging technologies.

• Lead end-to-end IT audits, including planning, fieldwork, reporting, and follow-up.

• Assess IT general controls, application controls, database security, access management, and change management processes.

• Present IT audit findings and recommendations to executive management and the Audit Committee.

• Partner with IT and Business leaders to ensure timely remediation of identified issues.

• Maintain strong relationships with external auditors and regulators.

• Monitor regulatory developments and assess impact on IT controls.

• Provide assurance over IT projects, digital transformation initiatives, and vendor risk management.

• Foster a culture of continuous learning, innovation, and professional excellence.

Key Skills & Competencies

• Strong knowledge of IT and Information Security frameworks (COBIT, ISO 27001, NIST, ITIL).

• Expertise in cybersecurity, cloud computing, SAP systems. advanced knowledge IT including SAP-MM, FI, and SD module and audit tools.

• Expert knowledge of MS, Excel.

• Strong analytical and problem-solving skills with ability to interpret complex IT risks.

Qualifications, Experience

• Bachelor’s degree in Information Technology, Computer Science, or related field.

• Professional certifications: CISM, CISSP, CISA (preferred). Additional commercial qualification such as C.A, CFA etc. will be added advantage

1. 10 - 12+ years of experience in IT Audit, Technology Risk,Information Security.

Behavioural Skills

• Analytical/ Probing Skills, Conceptual thinking, Aptitude to pick up new practices and concepts quickly.High levels of Initiative, Integrity and Self Confidence and presentation skill.