Audit Executive–Information

Department Overview:

The Technology Audit team is part of Internal Audit function of IDFC FIRST Bank. As a Third line of defense, the function has responsibility to provide independent assurance to internal and external stakeholders. As Bank’s operations are increasingly computerized, Technology audits must ensure that IT related controls, processes and its governance is effective. The primary objective of Technology audits includes:
• Ensure IT systems and processes are compliant with internal standard/policies and regulatory requirements.
• Evaluate security and resiliency of IT systems and processes in place.
• Ensure information management processes are in compliance with RBI, policies and standards.
• Determine risks to a company's information assets, and help identify methods to minimize those risks.

Key Responsibilities:
• Understand the IS environment to determine the size and complexity of the systems and the extent of dependence on information systems by the bank.
• Perform review of Application controls, Operating System Security, Network Infrastructure, Cyber Security controls, Cloud security, Business Continuity and disaster recovery, and SDLC/Agile lifecycle.
• Perform reviews of general control process and security for systems under developments.
• Communicate the audit finding to respective business heads/ senior management.
• Follows-up on audit findings to ensure that management has taken corrective action(s).
• Develop relationship cross-functionally within IA and across the bank, mainly in IT, IT governance and ISG
• Timely delivery of internal and external submission, including regulatory and board.
• Support ad-hoc request related to audit delivery, internal/external submission.

Skills & Experience Required:
• Relevant experience – Minimum 6 Years.
• Strong knowledge of Cyber Security solutions, framework and process E.g Firewall, IPS/IDS, SIEM (Preferably Splunk), WAF, Malware Protection, Endpoint Security, PIM, Web & Email security, Vulnerability Management, DLP solutions, DMARC, Zero trust, NAC etc.
• Sound understanding of Networking Infrastructure, Switches and Routers.
• Good security knowledge about cloud platforms like AWS.
• Sound understanding of Operating Systems, Databases and applications.
• Sound Ability to gather data, compile information, and prepare reports
• Knowledge of IS/IT auditing concepts and principles.
• Strong interpersonal negotiation skills and professional communication skills
• Ability to express views clearly and fluently, both orally and in writing.
• Knowledge of current technological developments/trends in area of expertise.

Educational Qualifications: MBA- IT/BE/B.Tech/MCA would be an advantage.

Certifications: CISA/CISSP/CISM/CEH/CRISC/Cloud certifications or any other equivalent