Lead - IT Audit

Job description

**Job Purpose:** In alignment with the RBI Master Direction (2023), providing independent assurance that the organization's technology infrastructure, Loan Management Systems (LMS), and data assets are secure, resilient, and compliant. focuses on auditing IT governance, ensuring the integrity of automated credit calculations and audit trails, and verifying the effectiveness of Cyber Security measures such as Vulnerability Assessments (VAPT). Furthermore, assessing third-party risks associated with outsourced vendors and validate Business Continuity Plans (BCP) to ensure uninterrupted lending operations, ultimately reporting their findings to the Audit Committee to mitigate systemic and operational technology risks. **Preferred Industry** - Background from Mortgage Industry or Home Loans. **Key Responsibilities:** - Good understanding of ITGC, Data Security Controls and application control framework and complex IT environment such as the system of engagement, digital tools, cloud application infrastructure, network controls, system controls, database controls. - Conducting risk assessment and analysis. - Reviewing IT governance and project management processes. - Planning for audit engagements in line with the International Standards. - Reviewing and approving risk assessment and audit programs. - Coordinate with external audit teams and supervise them to ensure that they carry out their responsibilities effectively. - To Carry out ad hoc audit/reviews of any areas identified by management. - To examine internal IT controls, evaluate the design and operational effectiveness, determine exposure to risk, and develop remediation strategies. - To conduct efficient and effective IT audit procedures. - To perform regular audit testing and provide recommendations. - To review, evaluate, and test application controls. - To provide recommendations and guidance on identified security and control risks. - To develop a strong understanding of business and system processes. **Skills Required:** - Risk management - Regulatory knowledge - Fair understanding of regulatory requirements of RBI, NHB, Indian IT Act. - Analytical Skills - Industry networking