SISA Information Security – Regulatory Auditor SISA Information Security

The Corporate Institute; Gurgaon; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

The Corporate Institute in India is seeking a high-calibre Regulatory Auditor with deep experience in RBI, SEBI, IRDAI and UIDAI regulatory ecosystems to conduct audits for financial sector clients. The role requires translating circulars into testable controls and delivering clear audit evidence.

You will interpret complex regulations, map them to risk-based audit plans, draft management-ready observations, and engage with CXOs, compliance heads and regulators to ensure timely closure of

Qualifications

• Regulatory audits experience for financial services.
• Ability to interpret RBI/SEBI/IRDAI circulars and derive obligations.
• Strong documentation and evidence-tracking skills.

Responsibilities

• Interpret regulatory circulars, master directions, and advisories into control frameworks and audit checkpoints.
• Execute end-to-end regulatory audits: scoping, risk assessment, fieldwork, evidence validation, reporting, closure tracking.
• Conduct gap assessments against RBI, SEBI, IRDAI, UIDAI, and other applicable requirements.
• Validate control effectiveness through structured evidence review.
• Draft high-quality audit reports and management-ready observations.
• Support client responses to regulatory queries and inspections.
• Engage with CXOs, compliance heads, IT teams, and regulators.
• Manage timelines, deliverables, and stakeholder expectations across engagements.

Skills

Regulatory audits

IS audits

IT governance

Documentation

Stakeholder management

Job description

Role Summary

We are looking for a high-calibre Regulatory Auditor with strong expertise in the Indian regulatory ecosystem (RBI, SEBI, IRDAI, UIDAI, etc.) to execute regulatory compliance audits for financial sector clients. The role demands strong regulatory interpretation capability, structured audit execution, and the ability to translate regulatory circulars into measurable, testable controls.

Key Responsibilities

• Interpret regulatory circulars, master directions, and supervisory advisories and translate them into control frameworks and audit checkpoints.
• Execute end-to-end regulatory audits: scoping, risk assessment, fieldwork, evidence validation, reporting, and closure tracking.
• Conduct gap assessments against RBI, SEBI, IRDAI, UIDAI, and other applicable regulatory requirements.
• Validate control effectiveness through structured evidence review.
• Draft high-quality audit reports and management-ready observations.
• Support client responses to regulatory queries and supervisory inspections.
• Engage confidently with CXOs, compliance heads, IT teams, and regulators.
• Manage timelines, deliverables, and stakeholder expectations across engagements.

Required Expertise

• Strong understanding of Indian regulatory frameworks (RBI, SEBI, IRDAI, UIDAI).
• Experience in regulatory audits – IS audits – IT governance assessments.
• Ability to independently interpret circulars and derive compliance obligations.
• Strong documentation, analytical, and stakeholder management skills.

Certifications (Mandatory – at least one)

• 1. CISA
• 2. ISO/IEC 27001 Lead Auditor

Preferred Background

• Experience in banking, financial services, insurance, fintech, or other regulated entities.