Senior Auditor - IS Audit

Hdfc Bank; Mumbai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

HDFC Bank Limited is seeking an IT Audit professional to collect and assess evidences against IT policies and regulatory guidelines. The role involves identifying exceptions, drafting findings, and coordinating with auditees for responses, with follow-up through closure and reporting to senior committees.

The ideal candidate should have knowledge of IT General Controls and exposure to SOX, COBIT, ISO 27001, ITIL, ISO22301, COSO 2013, and PCI DSS, with relevant academic credentials.

Qualifications

• Basic knowledge of IT General Controls required.
• Exposure to international acts like SOX and governance frameworks (COBIT).
• Familiarity with standards such as ISO 27001, ITIL, ISO22301, COSO 2013 and PCI DSS recommended.

Responsibilities

• Collect evidences from auditees as per objectives and scope.
• Assess compliance to Bank's IT policies, information security policies, and regulatory guidelines.
• Identify exceptions and form preliminary audit opinions.
• Discuss findings with Audit supervisor for feedback and refinement.
• Prepare draft audit findings and obtain preliminary responses/verification from auditees.
• Track closure status and prepare closure memos after final report release.
• Support TLs/ZHs in drafting MIS reports on IS audits.
• Assist TLs/ZHs in drafting Work Done notes for Audit Committee.

Skills

IT General Controls

SOX

COBIT

ISO 27001

ITIL

ISO22301

COSO 2013

PCI DSS

CISA / CISSP (certification)

Education

Bachelor's degree in Science/Engineering/IT or MBA/PGDM

Job description

Role & responsibilities

• Collect evidences from the auditees as per the objectives and scope set
• Basis the evidences collected, assess compliance to Bank's IT related policies and procedures, Information Security related policies and procedures and regulatory guidelines.
• Identify exceptions and form the preliminary audit opinion of the exceptions observed
• Discuss the findings with the Audit supervisor; seek feedback and fine tune the audit, where required
• Prepare draft audit findings and discuss with auditees and seek their views / preliminary responses/confirmation of facts.
• Upon release of final report, basis the target date provided by the auditees for closure, follow-up with auditees for status of audit recommendations till closure of the reports
• Prepare closure memos in a timely manner
• Assist TLs / ZHs in preparation of 1st draft of MIS reports on IS audits, for various purposes
• Assist TLs / ZHs in preparation of 1st draft of Work done notes for Audit Committee of the Board

Preferred candidate profile:

• Should have basic knowledge of IT General Controls. Should have exposure to one or more of the following areas - international acts such as SOX, IT Governance Frameworks such as COBIT, standards such as ISO 27001, ITIL, ISO22301, COSO 2013, Payment Cards Industry Data Security Standard (PCI DSS).
• Should possess at least a Bachelor of Science, Bachelor of Engineering/Technology, Master of Computer Application/Computer Science or Master in Business Admin/Post Graduate Diploma in Business Administration/Post Graduate Program in Management in Computer Science/Information Technology or equivalent.
• Should preferably have a certification such as CISA / CISSP