GM - IT Audit

Key Responsibilities

• Conduct IT and cloud security audits across various domains, including IT General Controls (ITGC), Information Security Controls, Cloud Security, Network Security, Vulnerability Management
• Vendor Risk Assessments. -Assess compliance with relevant laws, regulations, industry standards
• organizational policies across both on-premises and cloud environments. -Develop and enhance information security and cloud security policies and procedures in alignment with industry best practices. -Maintain thorough documentation of audit findings, risk assessments, security measures, working papers, audit program checklists
• evidence for internal and external reporting. -Validate ITGC, cloud security
• application-specific controls and manage audit documentation, risk assessments, evidence gathering
• control testing. -Follow up on audit findings and ensure timely closure of non-compliance and security issues identified during audits. -Manage and oversee third-party risk assessments and audits, ensuring robust security controls are implemented across traditional and cloud-based service providers. -Lead and participate in the development, migration
• implementation of security controls and policies for network and cloud security solutions. -Conduct risk-based security assessments of internal, vendor
• third-party hosted environments, covering both traditional IT infrastructure and cloud environments. -Participate in product and vendor selection processes, contributing security and risk expertise to the evaluation, implementation
• integration of new technologies, with a strong focus on cloud security solutions.
• Experience & Skills Required -Minimum 10 years of experience in Information Security and Auditing, with a strong background in Cloud Security and the Banking and IT industries. -Proven experience in conducting IT and cloud security audits, validating ITGC and cloud application controls
• maintaining comprehensive audit documentation. -Hands-on experience in vulnerability management, risk management, physical security, identity and access management, encryption, secure development, incident management, security infrastructure
• security policies across on-premises and cloud environments. -Strong expertise in third-party risk management, regulatory compliance
• management of IT audit findings across traditional and cloud-based environments. -Strong analytical and problem-solving skills with excellent communication, stakeholder management
• documentation abilities. -Ability to manage multiple projects, prioritize tasks
• meet deadlines effectively. -Strong understanding of IT, cloud security, cybersecurity frameworks, standards
• industry best practices. -Proficiency in security assessment tools and technologies, particularly those related to cloud environments.
• Qualifications & Certifications -Bachelor’s or Master’s degree in Information Technology, Cyber Security, Computer Science
• a related field. -Preferred certifications include ISO 27001, CNSS, CCNA, CISA, CISM
• Detailed knowledge of security tools, PCI-DSS, ITGC controls, compliance testing, cloud risk assessment, GRC, OWASP, MITRE ATT&CK, change management
• security policies and procedures. -Proficiency in security and cloud technologies including AWS, Azure, Google Cloud Platform (GCP), Palo Alto, Fortinet, Check Point Firewalls, SOAR (Cortex)
• Why Join Us -Be part of a collaborative, output-driven program that brings cohesiveness across businesses through technology. -Contribute to improving average revenue per user by increasing cross-sell opportunities. -Receive strong 360-degree feedback from peer teams on your contribution and support toward their goals. -Earn respect through meaningful contributions and strong performance with peers and managers. -Join an organization with 500M+ registered users, 21M+ merchants
• a deep data ecosystem, with the opportunity to contribute to India’s largest digital lending story. -If you are the right fit, we believe in creating wealth and meaningful growth opportunities for you.