Internal Audit - Cybersecurity & Technology Risk

Truhome Finance Ltd; Mumbai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Truhome Finance Ltd is seeking an IT Audit professional to conduct risk-based audits across cybersecurity, information security, IT general controls, applications, and cloud environments. You will evaluate controls and document findings to strengthen governance and compliance.

The role involves planning, executing audits, identifying gaps, preparing reports, and coordinating with business and external regulators. A background in BFSI/NBFC/HFC with certifications like CISA/CISSP/CISM is preferred.

Qualifications

• Experience in IT Audit, Information Security Audit, or Cybersecurity Audit in BFSI/NBFC/HFC.
• Familiarity with ISO 27001, NIST, COBIT and regulatory requirements.
• Knowledge of cloud environments and technology governance.

Responsibilities

• Plan and execute IT audits covering cybersecurity, information security, ITGC, apps, infra, and cloud.
• Review ITGCs including access, change, operations, backups, and incident management.
• Assess information security controls and cyber resilience; manage vulnerabilities.
• Evaluate compliance with ISO 27001, NIST, COBIT and regulatory requirements.
• Review application controls and governance of technology projects.
• Identify control gaps, document findings, and track remediation.
• Prepare audit reports and track closure of audit observations.
• Coordinate with business, technology, and external/regulatory auditors.

Skills

IT audit

Cybersecurity

Information security

ITGC

Cloud security

Regulatory compliance

Data analytics

COBIT

ISO 27001

Education

CA / MBA / BE / B.Tech / MCA or equivalent

Tools

COBIT framework

Job description

Role Overview

Conduct risk-based IT audits covering cybersecurity, information security, IT general controls (ITGCs), applications, infrastructure, cloud environments, and technology governance. Evaluate the effectiveness of controls, identify risks, and recommend improvements to strengthen the organization’s control environment.

Role & responsibilities

• Plan and execute IT audits covering cybersecurity, information security, IT general controls (ITGC), applications, infrastructure, cloud environments, and technology.
• Review ITGCs including access management, change management, IT operations, backup & recovery, and incident management.
• Assess information security controls, cyber resilience, vulnerability management, and cloud security.
• Evaluate compliance with frameworks such as ISO 27001, NIST, COBIT, and regulatory requirements.
• Review application controls and technology project governance.
• Identify control gaps, document findings, and track remediation.
• Prepare audit reports and track closure of audit observations.
• Coordinate with business, technology, and external/regulatory auditors.

Preferred candidate profile

• CA / MBA / BE / B.Tech / MCA or equivalent.
• Preferred certifications: CISA, CISSP, CISM, CRISC, ISO 27001 Lead Auditor.
• 4 to 8 years of experience in IT Audit, Information Security Audit, Cybersecurity Audit, or Technology Risk within BFSI/NBFC/HFC
• Strong knowledge of ITGC, cybersecurity, digital lending systems, and regulatory compliance.
• Exposure to COBIT, ISO 27001, cloud/security reviews, and data analytics tools preferred.