Internal Auditor-Information Security/System Audits:Audit & Process_AFL

Axis Finance Limited; Navi Mumbai; On-site; INR 600,000 - 900,000; Full time

Job summary

Axis Finance Limited is hiring an Auditor in Navi Mumbai to conduct audits of Information Systems and Information Security. The ideal candidate should possess relevant certifications such as CISA, CISM, CISSP, or CIA, along with 3-5 years of experience, preferably in the banking or NBFC domain. Key responsibilities include conducting internal audits, ensuring audit report quality, and providing recommendations for process improvements. Excellent communication and teamwork skills are essential for this role.

Qualifications

• Graduates/CAs/MBA (Finance) with relevant certification such as CISA / CISM / CISSP / CIA.
• 3-5 years of experience in Audit/Banking/NBFC domain preferred.
• Experience in Information Systems/Infosec audits in financial services.

Responsibilities

• Conducting internal audits and submitting reports based on risk norms.
• Ensuring quality of audit reports through root cause analysis.
• Using off-site audit reports for risk identification.
• Providing qualitative suggestions for process improvements.
• Following up on closure of audit findings.
• Submitting information relating to audits to stakeholders.

Skills

CISA

CISM

CISSP

CIA

Information Security Governance

Risk Assessment

Root Cause Analysis

Data Mining

Good Communication Skills

Team Collaboration

Education

Graduates/CAs/MBA (Finance)

Tools

Various Operating Systems

Databases

Network Architecture

Audit Software

Job description

About the Role

The role of Auditor involves:

• Conducting audits of Information Systems / Information Security covering process reviews, application control and functionality reviews, BCP and DR testing, and adherence to Regulations with respect to Information Systems / Infosec.
• Execution of planned audits by adhering to given schedules and ensuring adherence to audit / ISO processes & ICAI standards. Review of compliance to audit reports submitted by auditee units. Ensuring follow up for closure of reports and files within prescribed timelines.

Key Responsibilities

• Conducting internal audits within stipulated time and submission of audit reports based on risk based audit norms.
• Ensuring quality of audit report (depth & coverage) by focusing on root cause analysis and providing qualitative suggestions/recommendations for improvement of processes & mitigation of risk.
• Effective use of off‑site audit reports (with special focus on data mining & analysis) for bringing out risks in the audit reports.
• Conducting planned and unplanned audits and provide qualitative suggestions/recommendations for improvement of processes.
• Updating skill sets and knowledge through continuous readings, attending trainings.
• Ensuring timely follow‑up on closure of audit findings; checking the closure in line with the risk and recommendation; processing the closure of audit issues / reports as per the policy.
• Timely submission of information relating to audits conducted to internal and external stakeholders.

Qualifications, technical skills and experience

Graduates/CAs/MBA (Finance) with relevant certification such as CISA / CISM / CISSP / CIA.

3-5 Years of Experience (Audit/ Banking / NBFC Domain preferred).

Experience in Information Systems / Infosec audits in the financial services (Banking, NBFC) industry.

The auditor should have:

• Solid base of computer skills in hardware and software.
• Knowledge of various operating systems.
• Knowledge of databases.
• Hands‑on experience on network architecture.
• Knowledge of other IT infrastructure.
• Application controls and interfaces.
• Knowledge on information security governance.
• Knowledge on business continuity and disaster recovery framework.
• Demonstrate good understanding of IS/Infosec function audits.
• Knowledge of business applications used in banking / NBFC industry.
• Understanding of statutory and regulatory requirements and policies.
• Working on the preparation of the audit calendar for the year based on the residual risk assessment and methodology defined in the audit policy of the organization.
• Conducting specific audits based on plan or trigger based requirements.
• Drafting detailed audit reports with assessment details, preparation of supporting workpapers, clearly documenting the observations noted with implications and recommending corrective actions to auditee.
• Coordinating and supporting the company’s compliance team during RBI audits and other external audits.
• Good communication (both verbal & written) and interpersonal skills.
• Ability to work independently or as a part of a team and contribute towards team goals.
• Planning the audit, developing clear and concise risk/control matrices and audit programs, and reporting.
• Demonstrate professionalism, competence and clarity of communication when dealing with IT stakeholders.
• Demonstrate reasonable knowledge of the industry or sector and be aware of technical issues or audit risk.