CISO - Internal Audit

Essar Career Site; Mumbai; On-site; INR 2,500,000 - 5,000,000; Full time

Job summary

Essar Career Site seeks an experienced IT Audit and Security leader to oversee CISO-like responsibilities, drive risk-based IT audits, and ensure controls across applications, infrastructure, and cybersecurity. The role collaborates with business and IT teams to strengthen controls and drive improvements.

The incumbent will present findings to senior leadership, coordinate with external auditors, and stay aligned with evolving regulatory requirements, COBIT/ISO frameworks, and SAP environments.

Qualifications

• Bachelor’s degree in IT/CS or related field.
• CISM, CISSP, or CISA preferred; CA/CFA etc. will be added advantage.
• 10–12+ years IT Audit/Technology Risk/Information Security experience.
• Strong knowledge of IT and Information Security frameworks.

Responsibilities

• Develop and execute a comprehensive IT audit strategy aligned with regulatory expectations.
• Establish risk-based IT audit plans covering applications, infrastructure, cybersecurity, digital initiatives, and emerging technologies.
• Lead end-to-end IT audits, including planning, fieldwork, reporting, and follow-up.
• Assess IT general controls, application controls, database security, access management, and change management processes.
• Present IT audit findings and recommendations to executive management and the Audit Committee.
• Partner with IT and Business leaders to ensure timely remediation of identified issues.
• Maintain strong relationships with external auditors and regulators.
• Monitor regulatory developments and assess impact on IT controls.
• Provide assurance over IT projects, digital transformation initiatives, and vendor risk management.
• Foster a culture of continuous learning, innovation, and professional excellence.

Skills

IT security frameworks

Cybersecurity

Cloud computing

SAP audit

MS Excel

Analytical thinking

Education

Bachelor’s degree in IT/CS

CISM / CISSP / CISA

Tools

SAP

Audit tools

Job description

Main objective being –

• Undertake CISO role any ensure regular monitoring of email communication,USB,any other policy exceptionetc.

• Internal audit system/IT audit co-ordination and driving quality of audit with business and internal audit firms.

• Objectively review business IT risk leading to business risks and help in mitigation etc.

• Review and drive control related automation IT infrastructure, application, SAP configuration controls audits. Help management in improvement of efficiency of operation.

• Protect against loss/fraud by establishing process of red flag, exception reporting/data analytics etc. Pro-active internal audit intervention for control improvements/automated controls.

Key Challenges

• Developing and maintaining information security monitoring and audit processes and controls that meet requirements of control framework without compromising business growth and operational efficiency

• Incumbent takes decisions on operational aspect of the audit programme to be exercised.

• Role for developing effective operating systems

• Role to support and exploit synergies and maximise value from audit deliveries

• Lead automation and IT audits in order to have pro-active audit intervention etc.

  Interactions: Internal Interactions-Functional HOD’s on an assignment basis and support team etc. interaction at all level, External, vendor etc. where required.

Key Responsibilities

• Develop and execute a comprehensive IT audit strategy aligned with organizational objectives and regulatory expectations.

• Establish risk-based IT audit plans covering applications, infrastructure, cybersecurity, digital initiatives, and emerging technologies.

• Lead end-to-end IT audits, including planning, fieldwork, reporting, and follow-up.

• Assess IT general controls, application controls, database security, access management, and change management processes.

• Present IT audit findings and recommendations to executive management and the Audit Committee.

• Partner with IT and Business leaders to ensure timely remediation of identified issues.

• Maintain strong relationships with external auditors and regulators.

• Monitor regulatory developments and assess impact on IT controls.

• Provide assurance over IT projects, digital transformation initiatives, and vendor risk management.

• Foster a culture of continuous learning, innovation, and professional excellence.

Key Skills & Competencies

• Strong knowledge of IT and Information Security frameworks (COBIT, ISO 27001, NIST, ITIL).

• Expertise in cybersecurity, cloud computing, SAP systems. advanced knowledge IT including SAP-MM, FI, and SD module and audit tools.

• Expert knowledge of MS, Excel.

• Strong analytical and problem-solving skills with ability to interpret complex IT risks.

Qualifications, Experience

• Bachelor’s degree in Information Technology, Computer Science, or related field.

• Professional certifications: CISM, CISSP, CISA (preferred). Additional commercial qualification such as C.A, CFA etc. will be added advantage

1. 10 - 12+ years of experience in IT Audit, Technology Risk,Information Security.

Behavioural Skills

• Analytical/ Probing Skills, Conceptual thinking, Aptitude to pick up new practices and concepts quickly.High levels of Initiative, Integrity and Self Confidence and presentation skill.