IS Audit

Airtel Payments Bank; Gurugram District; On-site; INR 2,200,000 - 3,400,000; Full time

Job summary

Airtel Payments Bank seeks an experienced Information Systems auditor to lead risk-based IS audit planning and execution within the bank's control framework.

The role involves independent IS and IT application audits, coordination with external audit partners, and reporting to the Audit Committee and senior management. Strong knowledge of IT governance, security controls, and regulatory requirements is essential.

Qualifications

• Experience in auditing financial services or banks.
• Knowledge of IS audit standards and regulatory requirements.
• Ability to plan and execute risk-based IS audits.

Responsibilities

• Plan IS Audit using Risk Based Approach, including IT risk assessment and scoping.
• Assist in IS Audit Plan and strategy for Audit Committee approval.
• Conduct independent IS/IT Application audits; oversee vendor audits.
• Follow up on ATR and audit tracking reports.
• Report status of planned vs actual audits to Audit Committee and senior management.
• Establish QA processes to capture auditee needs and improve audit quality.
• Coordinate with external IS audit partners to ensure coverage and quality.
• Promote and use CAATs to improve audit efficiency and effectiveness.
• Support Internal Audit initiatives and special projects.
• Understand IS Audit Universe covering applications, data, infrastructure and people.
• Know IT governance, IT operations, outsourcing, and security controls.
• Be aware of regulatory guidelines for IT/Information Security in banking.
• Possess knowledge of IS controls and audit practices.
• Assess impact of deficiencies in IT internal control.
• Understand fraud risk factors and related controls in IS audits.
• Uphold professional auditing standards.

Skills

IS Audit

IT Governance

CAATs

Regulatory Knowledge

Risk Assessment

Audit Planning

Vendor Audit

Data Center Controls

Data Migration Audits

Fraud Risk Assessment

Education

B.E./B.Tech/MCA

Master’s Degree

Tools

CAATs

Job description

The incumbent will be responsible for conducting/ monitoring Information Systems audit for the bank.

Responsibilities

• To carry out Information System (IS) Audit planning using the Risk Based Audit Approach. The approach would involve aspects like IT risk assessment methodology, defining the IS Audit Universe, scoping and planning the audit, execution and follow up activities.
• To assist in the preparation of the annual IS Audit Plan and strategy (based on the scoping document, risk assessment, in compliance with appropriate external regulatory/legal requirements and well-known IS Auditing Standards) for being put before the Audit Committee for approval.
• Handle independent execution of IS audits and IT Application audits within the bank and Vendor onsite/offsite IS audits; IT/IS Audit review for services provided by a third party for the controls within them forming part of the bank’s information systems.
• Would be responsible for follow up and closure on ATR (Audit Tracking Report)
• To assist in report on the status of planned versus actual IS audits, and any changes to the IS audit plan (to be presented periodically to the Audit Committee and Senior management)
• To establish a quality assurance process (e.g., interviews, customer satisfaction surveys, assignment performance surveys etc.) to understand the auditee’s needs and expectations relevant to the IS audit function
• Close co-ordination and oversight on the work performed by external IS audit partners appointed for execution of parts of audit plan.
• To promote and enhance utilization of CAATs to increase the efficiency and effectiveness of the audit
• Assist in initiatives taken by Internal Audit and special projects.
• Understanding of IS Audit Universe to ensure holistic coverage for the IS audits across - Application Systems, Information or data, Infrastructure (technology and facilities like hardware, operating systems, database management systems, networking, etc., and the environment that houses and supports them that enable the processing of the applications), People (internal or outsourced personnel required to plan, organize, acquire, implement, support, monitor and evaluate the information systems and services)
• Understanding of audit and risk aspects related to domains such as IT Governance, IT Operations, IT Outsourcing, Application Control & Security, Pre and post implementation application control audits and data migration audits with regard to critical systems, Change Management, Logical Access, BCP/ DR, Data centre controls
• Strong understanding of the regulatory framework and guidelines applicable to Information Technology / Information Security and Information Systems Audit from various sectoral regulators as applicable for Banks.
• To possess the relevant knowledge of Information Systems, IS Controls and leading audit practices.
• To have relevant competencies to understand the ultimate impact of deficiencies identified in IT Internal Control framework as part of IS audits.
• Understanding of various fraud risk factors and ability to assess the associated risks and controls with the area under IS audit.
• To be able to exercise due professional care, which includes following professional auditing standards in conducting the audit.
• Competence, skills, knowledge, training and relevant experience in technology and IS audit domain.
• Working Experience : 10-12 years of experience in auditing in financial services (preferably Bank), mid-size/large professional services firm with assignments in Internal Audit / information Security / Information technology
• Educational Level : B.E/B.Tech/MCA, Master’s Degree
• Certifications like ISO27001/ CISA / CIA / Certified Cyber Security will be added advantage