Senior Manager -Internal Audit (Information Security and System Audit)

slice; Bengaluru; On-site; INR 1,000,000 - 1,500,000; Full time

Benefits offered by this job

Extensive medical insurance

Flexible working hours

Tailored vacation & leave policies

Reward system for milestones

Learning and upskilling opportunities

Cool office environment

Job summary

A modern banking institution based in Bengaluru is seeking a skilled professional for application and product-level security audits. The role will involve evaluating security across mobile and web applications, ensuring compliance with RBI guidelines, and working closely with product and engineering teams. Candidates should have 5+ years in information security audits with significant experience in banking or fintech, specifically with digital products. This position offers a dynamic work environment with flexible hours and a focus on employee well-being.

Qualifications

• 5+ years in Information Security Audits, particularly in digital banking.
• Experience in reviewing product-level ITGCs and compliance measures.
• Ability to analyze product journeys for process-level security risks.

Responsibilities

• Conduct security audits of mobile & web applications.
• Evaluate app compliance with RBI and CERT-IN guidelines.
• Document findings and provide actionable recommendations.

Skills

Mobile/web application security

OWASP Top 10

API security

Audit documentation

Vulnerability management workflows

Education

BE/BTech in Information Security, IT, or Cybersecurity

CISA

Job description

The individual will be responsible for conducting application and product-level security audits across digital banking platforms. The role focuses on evaluating end-to-end app workflows, user journeys, APIs, backend services, and integrations to ensure robust security, compliance, and risk governance. The individual will work closely with product, engineering, and security teams to strengthen the security posture of all customer-facing apps and digital products.

What you will do

• Conduct security audits of mobile & web applications, including onboarding flows, payments, authentication journeys, customer dashboards, and backend microservices.
• Evaluate app compliance with RBI cybersecurity guidelines, CSITE requirements, CERT-IN directives, and secure digital product practices.
• Assess app-specific ITGCs and functional controls, including access management, configuration integrity, release/change processes, and secure SDLC adherence.
• Review app architecture, APIs, SDKs, third-party integrations, and product dependencies for security gaps.
• Identify risks across product workflows, such as KYC, login & session controls, transaction authorization, data flows, and fraud-prone journeys.
• Perform control testing and app security assessments, including review of logs, API behaviour, encryption practices, and sensitive data handling.
• Evaluate DevSecOps practices, CI/CD release pipelines, and secure coding guidelines followed by engineering teams.
• Document findings and provide actionable recommendations to product & tech teams for enhancing app security without impacting user experience.
• Track closure of product-specific vulnerabilities and ensure timely remediation.
• Partner with product managers, developers, QA teams, and security engineers to strengthen digital product governance and readiness for regulatory audits.
• Support app-focused cybersecurity awareness and guide product teams during regulatory inspections.

What you will need

• Strong understanding of mobile/web application security, secure SDLC, OWASP MASVS/OWASP Top 10, RBI digital banking security guidelines, and CERT-IN regulations.
• Experience in reviewing product-level ITGCs, including app access controls, change management, version/release governance, and backup & restore checks.
• Ability to analyze product journeys, detect process-level security risks, and ensure regulatory adherence for digital banking platforms.
• Knowledge of API security, cloud-hosted applications, microservices, app-layer encryption, network basics, and vulnerability management workflows.
• Strong skills in audit documentation, writing product-focused security observations, and coordinating with product & engineering teams.

Experience & Qualifications

• BE/BTech or equivalent in Information Security, IT, or Cybersecurity.
• CISA (Mandatory).
• 5+ years in Information Security Audits, with at least 2 years in banking or fintech, specifically auditing digital products, mobile apps, or customer-facing banking journeys.

Life at slice:

Life so good, you’d think we’re kidding:

• An extensive medical insurance that looks out for our employees & their dependants. We’ll love you and take care of you, our promise.
• Flexible working hours. Just don’t call us at 3AM, we like our sleep schedule.
• Tailored vacation & leave policies so that you enjoy every important moment in your life.
• A reward system that celebrates hard work and milestones throughout the year. Expect a gift coming your way anytime you kill it here.
• Learning and upskilling opportunities. Seriously, not kidding.
• Good food, games, and a cool office to make you feel like home. An environment so good, you’ll forget the term “colleagues can’t be your friends”.

At slice, we are committed to building a diverse and talented workforce. We never discriminate on the basis of race, sex, religion, colour, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, medical condition, disability, or any other class or characteristic protected by the applicable law.

We consider all qualified job-seekers with criminal histories in a manner consistent with the applicable law. Additionally, we are committed to providing reasonable accommodations to qualified individuals with physical or mental disabilities in order to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment.

About Us

slice

A new bank for a new India

slice’s purpose is to make the world better at using money and time, with a major focus on building the best consumer experience for your money. We’ve all felt how slow, confusing, and complicated banking can be. So, we’re reimagining it. We’re building every product from scratch to be fast, transparent, and feel good, because we believe that the best products transcend demographics, like how great music touches most of us.

Our cornerstone products and services: slice savings account, slice UPI credit card, slice UPI, and slice business are designed to be simple, rewarding, and completely in your control. At slice, you’ll get to build things you’d use yourself and shape the future of banking in India. We tailor our working experience with the belief that the present moment is the only real thing in life. And we have harmony in the present the most when we feel happy and successful together.

We’re backed by some of the world’s leading investors, including Tiger Global, Insight Partners, Advent International, Blume Ventures, and Gunosy Capital.