Manager-IS Audit

Ujjivan Small Finance Bank; Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Ujjivan Small Finance Bank Ltd. in Bengaluru seeks a seasoned IT/IS Audit lead to strengthen internal controls and drive risk remediation.

You will oversee audit teams, conduct IT audits across core banking and digital platforms, and report findings to stakeholders. The role requires 7–10 years of IT/IS Audit experience in banking, with mandatory certifications such as CISA, CISSP or DISA, and additional industry certs like CCNP, CCDP or CEH.

Qualifications

• Degree in Information Technology / Computer Information Systems / Electronics & Communication.
• 7-10 years in IT/IS Audit within Banking domain and IT Operations.

Responsibilities

• Execute IT audits aligned with Internal Audit Annual Plan.
• Conduct regulatory audits for banking applications (Core Banking, Internet Banking).
• Examine internal IT controls, evaluate design and effectiveness.
• Test network and system vulnerabilities.
• Review, evaluate and test application controls.

Skills

IT/IS Audit

Banking domain

Risk assessment

Regulatory compliance

Vulnerability testing

Team leadership

Education

Degree in IT/CI S/EC

Tools

CAATTs tools

Job description

• Identification of Key IT and IS risk areas in the Bank.
• To conduct or lead audit teams for conducting IT audits and reviews of systems, applications and IT and IS processes.
• To participate in/conduct back-end audit activities like issue closure validation, audit partner interactions.

SIZE OF THE ROLE

FINANCIAL SIZE

NON-FINANCIAL SIZE

• NA
• Number of vendors / consultants: 5-7
• Quantity of equipment / stocks / projects: responsible for laptops assigned to audit partners (3-4).
• Volume of new hires onboarded:2-3
• Conduct approximately 17-20 audits as part of the audit plan.

KEY DUTIES & RESPONSIBILITIES OF THE ROLE

Business/ Financials (Only Relevant roles)

• Execution of IT audits assigned in line with Internal Audit Annual Plan.
• Conduct regulatory audits for various banking applications including critical applications such as Core Banking System, Internet Banking etc.
• Examine internal IT controls, evaluate the design and operational effectiveness.
• Test and identify network and system vulnerabilities.
• Review, evaluate and test application controls.

Customer (Both Internal & External)

• Prepare and submit audit report to stakeholders and Audit Committee
• Provide recommendations and guidance on identified security and control risks.
• Determine risk exposure, if any and develop remediation strategies.

Internal Process

• Ensure for closure of observations reported during IS/IT audits.
• Coordinate with business units and external security experts for reviews.
• Prepare presentations & MoMs for meetings, regulatory submissions.
• Thorough understanding of the internal audit methodology.
• Complete Quality Assurance (QAIP) in terms of IIA guidelines for Audits completed

Innovation & Learning

• Continuous learning on bank modules in Swayam learning app.
• Continuous learning on RBI Circulars, IBA Circulars, Statutory department circulars , internal circulars, policies and manuals.
• Undertake additional certifications, trainings and mandatory programs advised by the department.

MINIMUM REQUIREMENTS OF KNOWLEDGE & SKILLS

Educational

Qualifications

• Degree in Information Technology / Computer Information systems/Electronics & Communication.

Experience

• 7-10 years of experience in conducting IT/IS Audit in Banking domain, IT Operations

Certifications

• CISA or CISSP or DISA from ICAI (mandatory)
• Industry certifications like CCNP, CCDP, CEH or similar

Functional Skills

• Understanding of IT Audit methodologies.
• Understanding of Firewalls, VPN, Data Loss Prevention, IDS/IPS, Web-Proxy, routing, switching, server architectures, coding practices and Security Audits.
• Awareness of ITIL framework.
• Awareness of cybersecurity trends and hacking techniques.
• Awareness on ISO 27001, ISO 31000, ISO 22301 standards.

Behavioral Skills

• Strong attention to details with an analytical mind and problem solving skills.
• Ability to work under pressure in a fast-paced environment.

KEY INTERACTIONS

INTERNAL

EXTERNAL

• Audit Managers
• Other Stake holders of various department
• National Audit Managers
• IT Department – Different Functional and Delivery Heads