Assistant Manager - IT Audit

Job description

IT Audit Assistant Manager - Internal Audit will be responsible for executing and supporting information systems audits as part of the Corporate Internal Audit function. This role focuses on evaluating IT controls, cybersecurity governance, SAP system controls, ISMS processes, and compliance with RBI master directions applicable to NBFCs. The position requires coordination with business, IT, and risk functions to ensure effective auditing and strengthening of internal controls. Key responsibilities - Internal IT Audit Execution. Conduct end-to-end IT audits as part of the annual Internal audit plan. Perform detailed audit procedures, including: - Control walkthroughs - Control design assessment - Control operating effectiveness testing - Execute IT General Controls audits covering applications such as SAP and other business applications. - Conduct ISMS internal audits aligned with ISO 27001 requirements. - Perform internal audits aligned with RBI master directions for NBFCs to assess compliance with: - IT Governance Framework - Cyber Security Framework for NBFCs - Outsourcing of IT services guidelines - Data security and business continuity guidelines - Review adequacy of IT policies, procedures, and regulatory control adherence. - Reporting Follow-up. Prepare audit workpapers, supporting evidence, and documentation as per Internal Audit standards. Prepare internal audit reports with clear observations and actionable recommendations. Present findings to the Internal Audit Manager / IT Audit Lead / Head - Internal Audit. Report the observations to management and committee as appropriate. Follow-up with stakeholders for timely closure of audit issues and validation. Consultants / Third parties for delivering IT Audit Engagement. - Education. Postgraduate/ graduate in Engineering, IT, Computer Science, Electronics or relevant field. - Preferred certifications. ISO 27001 LA/LI. ITIL. CISA. - Experience: 4 to 6 years in Internal Audit - IT Audit within corporate or financial services. Skills. Understanding of Windows/Linux servers, major DBs and related internal controls like user and role management, patching, hardening, service accounts, logging and monitoring, backup recovery etc. Awareness of firewalls, ports, protocols, network segmentation, VPNs, and basic network security risks. Basics of cloud platforms (AWS/Azure/GCP), shared responsibility model, VM security, cloud IAM, and data protection. Hands-on experience in SAP ITGC audits (ECC / SAP RISE / GROW etc.). Hands-on experience in ISMS / ISO 27001 implementation and internal audits. Strong knowledge of RBI regulatory guidelines for NBFC IT and Cyber Security. Understanding of use of AI in IT audits. Strong documentation and report-writing skills. Ability to independently manage assigned audits. Analytical and detail-oriented. Strong communication and presentation skills. High integrity and adherence to internal audit protocols. Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.