Senior Auditor-Immediate Joiner

Reserve Bank Information Technology; Navi Mumbai; Hybrid; INR 1,500,000 - 2,000,000; Full time

Job summary

Reserve Bank Information Technology is seeking a professional with 6-8 years of experience in information security audits and risk assessment. The candidate will be responsible for auditing financial technologies in a hybrid cloud environment, ensuring they meet regulatory standards and security frameworks.

Key skills include project management, familiarity with AWS, and proficiency in Python or SQL. A strong background in banking technology and security certifications is essential for this role.

Qualifications

• 6-8 years of experience in information security operations and audits.
• Hands-on experience in writing policies and processes.
• Experience in project management techniques (PMP/Agile).

Responsibilities

• Conduct audits of projects within banking technologies.
• Lead assessments of AWS and cloud environments.
• Audit security policies and procedures to identify gaps.

Skills

Project Management

Cloud Security

Database Management

Information Security

Risk Assessment

Audit Skills

Python or SQL

Education

Relevant Certifications (PMP, CISA, CISSP)

Tools

AWS

Docker

Kubernetes

Job description

Mandatory Certifications

• PMP / CAPM / PRINCE2 / CSM

Preferred Certifications

• CCSP / AAIA / AAISM / CISA / CISM / CISSP / CEH / CRISC
• Domain‑specific certifications below may be preferred

Application & API Security Certifications

• MCSD
• Certification in Mobile application security testing
• Java certifications
• Certifications in API security

Database Security Certifications

• MCDBA
• Oracle database
• Certification in big data / analytics

Network Security Certifications

• CCNA
• Certified Firewall administrator

Cloud Security Certifications

• CCSK / CCSP

Experience and Key Responsibilities

• 6-8 years of total experience in Project Management review/audits, information security operations, information system audits encompassing Banking Technologies Domains: Cloud Security, Database management and administration, Network security, SOC and IT General controls (ITGC).
• Exposure to Banking / Finance / Payment industry domains preferred.
• Hands‑on experience in writing policies, procedures, processes.
• Conducting risk assessment covering Cyber Security domains.
• Hybrid Cloud Mastery: Lead deep‑dive audits of AWS (IAM, S3, VPC, GuardDuty) and Microsoft Hybrid environments.
• Code & Architecture Review: Audit Java‑based application security, focusing on API security, containerization (Docker/K8s), and DevSecOps pipelines.
• Project Governance: Conduct performance audits of high‑value IT projects, ensuring PMP/Agile milestones without compromising security.
• Data‑Driven Assurance: Use Python or SQL to build automated "Continuous Auditing" dashboards that track risk in real time.
• Database Security: Database administration and management — Oracle, MS SQL, etc., Database Activity Monitoring tools, data security and localization.
• Regulatory Alignment: Ensure IT operations comply with RBI Cyber Security Framework and Global Internal Audit Standards (2024).
• IT General Controls: Familiarity with technical security controls of Identity & Access Management, Network, Server, Application, Change management, Backup and Restoration, and process controls reviews.
• Understand BCP & DR processes and architecture.
• Experience in conducting reviews based on ISO standards and regulatory guidelines in banking sector for medium to large organisations.
• Conduct Information System Audits/Review.
• Prepare quality deliverables such as audit reports, presentations.
• Excellent written, oral, and presentation skills.
• Excellent organisational and interpersonal skills.
• Ability to work independently or as part of a team.

Additional Responsibilities

• Evaluate systemic impact of risks across PMO and ITIL service delivery.
• Dissect complex AWS/Azure/Hybrid‑Cloud architectures and scrutinize Java‑based microservices.
• Travel within Mumbai and across the country as required by RBI.
• Audit information security policies, procedures, and processes to identify process/design gaps.
• Audit information security systems and infrastructure to verify systems are secure and support applications/business processes.
• Audit different banking technology domains: Active Directory, WAF, Network access security, End‑point security, Application VA/PT/AppSec, SDLC, Database management and security, PCI‑DSS, IT General Controls, etc.
• Additional weightage for experience in Cloud Security, API security, CI‑CD pipeline, project management audits.
• Develop project plans, work programs, evaluate system controls, identify risks and audit gaps, document results in audit report format, make recommendations, and communicate to stakeholders.
• Support maintaining audit checklist and documents, trend analysis, preparing presentations.
• Self‑learner and keep updated with latest security guidelines issued by regulators, international standards, emerging technologies such as Cloud, Virtualisation, AI‑ML, IoT, CI‑CD, API security.