Head – Internal Audit – NBFC Benchire

The Corporate Institute; Mumbai, Bengaluru; On-site; INR 3,800,000 - 6,000,000; Full time

Benefits offered by this job

Hybrid work arrangement

Leadership exposure

Professional growth opportunities

Job summary

The Corporate Institute is seeking a senior Internal Audit leader to design and run a risk-based, technology-enabled audit function focused on governance, digital lending, and regulatory compliance. You will drive real-time risk insights, partner with leadership on product and fintech initiatives, and build a hybrid team of auditors and data specialists.

Based in Mumbai or Bengaluru, the role requires deep RBI NBFC guidelines experience and a track record of transforming traditional audits into

Qualifications

• 8+ years in NBFC / Bank / Fintech internal audit.
• Must-have: Digital lending / fintech exposure, RBI compliance experience.
• Strong experience in risk-based auditing, IT / data analytics audits.

Responsibilities

• RBIA framework & audit transformation aligned with RBI circular.
• Audit end-to-end digital journeys: API integrations, KYC flows.
• Credit, market & collateral risk oversight: LAMF/LAS exposures.
• Enterprise risk-based audit planning with dynamic risk assessment.
• Governance, regulatory & RBI compliance interface with RBI inspections.
• Continuous monitoring & analytics using dashboards & data signals.
• Audit delivery & board reporting with risk heatmaps & action tracking.
• Business partnering with leadership for risk-aware product launches.
• Team leadership & capability building for hybrid audit teams.

Skills

Digital lending

Data analytics

IT audit

Regulatory compliance

Risk-based auditing

Education

Bachelor's in Finance/Accounting

CA/CPA preferred

Tools

SQL

Power BI

GRC tools

Job description

Job Description:

Role & Responsibilities:

Given:

• – Increasing exposure to capital markets & collateral risk.
• – Rapid digital product rollout & fintech integrations (e.g., Volt Money acquisition).
• – RBI-mandated Risk-Based Internal Audit (RBIA).
• – The HIA role must go beyond compliance and act as a strategic risk partner, enabling safe scaling.

Reporting Structure:

• – Functionally reports to: Audit Committee of the Board (ACB).
• – Dotted-line: TBD.
• – Independent of all business verticals (credit, sales, fintech, partnerships).

Location:

• – Mumbai or Bengaluru.

Role Purpose:

• – Lead a technology-enabled, risk-based internal audit function that provides independent assurance on: Governance, Digital & lending risks, Internal controls, Regulatory compliance, and acts as a forward‑looking risk intelligence engine for the company.

Key Responsibilities:

1. RBIA Framework & Audit Transformation:

• – Build and operationalize RBIA aligned with RBI circular.
• – Transition audit from: 1. Transaction testing to Risk-based + process assurance. 2. Periodic audits to Continuous / real‑time monitoring.
• – Define audit universe across: 1. Lending lifecycle (origination, underwriting, disbursement, collections). 2. Capital markets linked exposure (LAMF / LAS). 3. Fintech platforms & APIs.

2. Digital Lending & Fintech Risk Audits:

• – Audit end-to-end digital journeys: Instant approvals, API integrations, KYC flows.
• – Review: 1. Algorithm-based underwriting / rule engines. 2. Credit decision models (model risk). 3. Data integrity, lineage, and governance.
• – Conduct: 1. ITGC, cybersecurity, and data access/control audits. 2. Third‑party / fintech partner audits.

3. Credit, Market & Collateral Risk Oversight:

• – Audit: 1. Loan Against Mutual Funds / Securities exposure. 2. Margining, collateral valuation, liquidation triggers.
• – Evaluate: 1. Stress scenarios (market volatility impact). 2. Concentration risk (FSG / wholesale exposure).
• – Independently validate risk appetite vs actual risk‑taking.

4. Enterprise Risk‑Based Audit Planning:

• – Develop dynamic risk assessment model incorporating: Portfolio growth & product expansion, New fintech integrations, Regulatory changes.
• – Prepare annual + rolling audit plans.
• – Use: Risk Control Matrices (RCMs), Internal Financial Controls (IFC) frameworks.

5. Governance, Regulatory & RBI Compliance:

• – Ensure compliance with: RBI NBFC guidelines, Digital lending norms, Outsourcing & third‑party risk regulations.
• – Interface with: RBI inspections, Statutory and external auditors.
• – Ensure strong documentation for regulatory scrutiny.

6. Continuous Monitoring & Analytics:

• – Build data‑driven audit capability: Exception dashboards, Early‑warning signals, Portfolio risk triggers.
• – Implement tools (SQL / Power BI / audit analytics).
• – Move toward real‑time audit assurance models.

7. Audit Delivery & Board Reporting:

• – Present to ACB: Risk heatmaps, Emerging risks (fintech + market linked), Persistent control gaps.
• – Ensure: Actionable, insight‑driven reporting, Highlight unresolved high‑risk observations consistently.

8. Business Partnering:

• – Act as a trusted advisor to leadership: Product launches, New partnerships (LSPs, fintechs).
• – Ensure risk is embedded at design stage, not post‑facto.

9. Team Leadership & Capability Building:

• – Build a hybrid audit team: Financial auditors, Data analysts, IT / cyber audit specialists.
• – Upskill team in: Digital lending ecosystems, analytics‑based auditing.

Eligibility Profile:

• – 8+ years in: NBFC / Bank / Fintech internal audit.
• – Must‑have: Digital lending / fintech exposure, RBI compliance experience.
• – Strong experience in: Risk‑based auditing, IT / data analytics audits.