It Auditor - Banking & Financial Services
Summary
IT Audit & GRC role at Protiviti in Chennai conducting IT audits, ITGC assessments, and compliance reviews for banking and financial services clients. Day-to-day work spans risk assessments against RBI frameworks, ISO 27001, COBIT and NIST CSF, audit reporting, and remediation tracking; requires 2-6 years' experience plus ISO 27001 LA and CISA certifications.
Role Overview
We are seeking a highly motivated IT Audit & GRC professional with strong experience in the Banking and Financial Services sector. The ideal candidate will have hands-on experience in IT Audits, Application Security, IT General Controls (ITGC) assessments, Governance
Risk & Compliance (GRC) reviews, and information security compliance programs. Exposure to RBI regulations and banking risk frameworks is highly preferred.
Key Responsibilities
- Conduct IT Audits and Information Security Assessments for banking and financial services clients.
- Execute Governance, Risk & Compliance (GRC) assessments and control testing activities.
- Assess compliance against:
- RBI Cyber Security Framework
- RBI Master Directions
- Third-Party Risk Management (TPRM) Guidelines
- ISO/IEC 27001
- COBIT Framework
- NIST Cybersecurity Framework
- Perform risk assessments, control reviews, and gap assessments.
- Review information security policies, procedures, standards, and governance practices.
- Prepare audit reports, risk registers, management presentations, and executive summaries.
- Track remediation activities and validate closure of audit observations.
- Collaborate with business stakeholders, technology teams, and senior management to drive compliance initiatives.
Required Skills
- Strong experience in:
- IT Audits
- ITGC Assessments
- GRC Programs
- Risk Management
- Compliance Reviews
- Banking application Review
- Knowledge of banking technology environments and regulatory requirements.
- Experience with RBI regulations, cybersecurity guidelines, and TPRM reviews.
- Understanding of Information Security Management Systems (ISMS).
- Excellent report writing, stakeholder management, and communication skills.
Qualifications
- Bachelor's Degree in Engineering, Information Technology, Computer Science, or equivalent.
- 2-6 years of relevant experience in IT Audit, Information Security Audit, or GRC functions.
- Experience working with Banking, NBFC, Payments, or Financial Services clients.
Certifications (Mandatory / Preferred)
Mandatory
- ISO/IEC 27001 Lead Auditor (LA) Certification
- CISA- 5+ Years
Preferred
- CRISC
- ISO 27001 Lead Auditor
- CISSP
- CISM
Preferred Candidate Profile
- Experience conducting audits for banks, financial institutions, or consulting organizations.
- Familiarity with RBI, NPCI, and banking regulatory requirements.
- Exposure to Technology Risk, Cybersecurity Governance, and Third-Party Risk Management programs.
- Ability to independently lead audit engagements and interact with client stakeholders.
Candidates with relevant years of strong experience in Banking/Financial Services/NBFC/Insurance IT Audits can also share their CVs directly to rahul.kumar3@protivitiglobal.in