Lead - IT Auditor

IIFL Finance; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

IIFL Finance seeks a Third Line of Defense IT Audit professional in India to assess ITGC, data security, LMS controls, and cyber security measures across our technology landscape. The role focuses on risk assessment and audits to ensure governance and compliance with applicable standards.

You will coordinate with external auditors and report findings to the Audit Committee to strengthen resilience and mitigate technology risks across the organization.

Qualifications

• Understanding ITGC and data security controls in complex IT environments.

Responsibilities

• Good understanding of ITGC, Data Security Controls and application control framework and complex IT environment such as the system of engagement, digital tools, cloud application infrastructure, network controls, system controls, database controls.

Skills

Risk management

Regulatory knowledge

Regulatory requirements RBI/NHB/IT Act

Analytical Skills

Industry networking

Job description

Job Purpose:

In alignment with the RBI Master Direction (2023), providing independent assurance that the organization's technology infrastructure, Loan Management Systems (LMS), and data assets are secure, resilient, and compliant. focuses on auditing IT governance, ensuring the integrity of automated credit calculations and audit trails, and verifying the effectiveness of Cyber Security measures such as Vulnerability Assessments (VAPT). Furthermore, assessing third-party risks associated with outsourced vendors and validate Business Continuity Plans (BCP) to ensure uninterrupted lending operations, ultimately reporting their findings to the Audit Committee to mitigate systemic and operational technology risks.

This role is for Third Line of Defense.

Role & responsibilities:

• Good understanding of ITGC, Data Security Controls and application control framework and complex IT environment such as the system of engagement, digital tools, cloud application infrastructure, network controls, system controls, database controls.
• Conducting risk assessment and analysis.
• Reviewing IT governance and project management processes.
• Planning for audit engagements in line with the International Standards.
• Reviewing and approving risk assessment and audit programs.
• Coordinate with external audit teams and supervise them to ensure that they carry out their responsibilities effectively.

Skills Required:

• Risk management
• Regulatory knowledge
• Fair understanding of regulatory requirements of RBI, NHB, Indian IT Act.
• Analytical Skills
• Industry networking