It Auditor - Banking & Financial Services

Protiviti India; Chennai; In loco; INR 900.000 - 1.300.000; Tempo pieno

Descrizione del lavoro

Protiviti India is seeking an IT Audit & GRC professional with strong experience in the Banking & Financial Services sector. The role emphasizes IT Audits, GRC assessments, RBI regulatory exposure, and information security programs within BFSI clients.

The ideal candidate will conduct risk-based audits, assess controls, and collaborate with business and technology teams to strengthen governance. 2–6 years of relevant experience is required.

Competenze

• Bachelor's degree in a relevant field is required.
• 2–6 years of relevant IT Audit/InfoSec/GRC experience.
• Experience with Banking, NBFC, Payments, or Financial Services clients is preferred.

Mansioni

• Conduct IT Audits and Information Security Assessments for banking and financial services clients.
• Execute GRC assessments and control testing activities.
• Assess compliance against RBI Cyber Security Framework, RBI Master Directions, TPRM guidelines, ISO/IEC 27001, COBIT, and NIST CSF.
• Perform risk assessments, control reviews, and gap assessments.
• Review information security policies, procedures, standards, and governance practices.
• Prepare audit reports, risk registers, management presentations, and executive summaries.
• Track remediation activities and validate closure of audit observations.
• Collaborate with stakeholders and technology teams to drive compliance initiatives.

Conoscenze

IT Audits

ITGC Assessments

GRC Programs

Risk Management

Compliance Reviews

Banking application Review

ISMS

Report writing

Stakeholder management

Formazione

Bachelor's Degree in Engineering/Information Technology/Computer Science

Descrizione del lavoro

Role Overview

We are seeking a highly motivated IT Audit & GRC professional with strong experience in the Banking and Financial Services sector. The ideal candidate will have hands‑on experience in IT Audits, Application Security, IT General Controls (ITGC) assessments, Governance

Risk & Compliance (GRC) reviews, and information security compliance programs. Exposure to RBI regulations and banking risk frameworks is highly preferred.

Key Responsibilities

• Conduct IT Audits and Information Security Assessments for banking and financial services clients.
• Execute Governance, Risk & Compliance (GRC) assessments and control testing activities.
• Assess compliance against:
• RBI Cyber Security Framework
• RBI Master Directions
• Third-Party Risk Management (TPRM) Guidelines
• ISO/IEC 27001
• COBIT Framework
• NIST Cybersecurity Framework
• Perform risk assessments, control reviews, and gap assessments.
• Review information security policies, procedures, standards, and governance practices.
• Prepare audit reports, risk registers, management presentations, and executive summaries.
• Track remediation activities and validate closure of audit observations.
• Collaborate with business stakeholders, technology teams, and senior management to drive compliance initiatives.

Required Skills

• Strong experience in:
• IT Audits
• ITGC Assessments
• GRC Programs
• Risk Management
• Compliance Reviews
• Banking application Review
• Knowledge of banking technology environments and regulatory requirements.
• Experience with RBI regulations, cybersecurity guidelines, and TPRM reviews.
• Understanding of Information Security Management Systems (ISMS).
• Excellent report writing, stakeholder management, and communication skills.

Qualifications

• Bachelor's Degree in Engineering, Information Technology, Computer Science, or equivalent.
• 2-6 years of relevant experience in IT Audit, Information Security Audit, or GRC functions.
• Experience working with Banking, NBFC, Payments, or Financial Services clients.

Certifications (Mandatory / Preferred)

Mandatory

• ISO/IEC 27001 Lead Auditor (LA) Certification
• CISA- 5+ Years

Preferred

• CRISC
• ISO 27001 Lead Auditor
• CISSP
• CISM

Preferred Candidate Profile

• Experience conducting audits for banks, financial institutions, or consulting organizations.
• Familiarity with RBI, NPCI, and banking regulatory requirements.
• Exposure to Technology Risk, Cybersecurity Governance, and Third-Party Risk Management programs.
• Ability to independently lead audit engagements and interact with client stakeholders.