Lead - Internal Audit - IT & Cyber Security - NBFC

Job Title: Lead - Internal Audit (IT & Cyber Security)

Location: New Delhi

Position Summary:

As the Lead - Internal Audit (IT & Cyber Security) , you will play a pivotal role in safeguarding our organization against IT and cyber risks. You will be responsible for assessing the effectiveness of our IT and cyber security controls, identifying vulnerabilities, and recommending improvements. This role requires a strong understanding of IT and cyber security frameworks, regulatory compliance, and risk management in the context of the NBFC sector in India.

Key Responsibilities:

Audit Planning: Collaborate with senior management to develop an annual IT and cyber security audit plan that aligns with business objectives and regulatory requirements.

Risk Assessment: Evaluate and identify potential IT and cyber security risks, vulnerabilities, and threats that may impact the organization.

Audit Execution: Conduct thorough and independent audits of IT and cyber security controls, policies, and procedures to ensure compliance with regulatory standards and industry best practices.

Reporting: Prepare comprehensive audit reports that clearly communicate findings, risks, and recommendations to senior management and the Audit Committee.

Compliance: Stay current with relevant regulations, guidelines, and industry trends to ensure the organization's IT and cyber security practices remain compliant.

Remediation: Collaborate with business units to track and monitor the implementation of corrective actions and remediation plans following audit findings.

Training and Awareness: Promote IT and cyber security awareness and best practices among employees through training programs and workshops.

Continuous Improvement: Identify opportunities for process improvements and recommend strategies to enhance the efficiency and effectiveness of IT and cyber security controls.

Incident Response: Assist in the development and testing of incident response plans and participate in incident investigations as needed.

Qualifications:

- Bachelor's degree in Information Technology, Cyber Security, or a related field. A Master's degree or professional certifications (e.g., CISA, CISSP) would be advantageous.

- Minimum 10 years of relevant experience in IT audit, cyber security, or risk management within the financial industry.

- In-depth knowledge of IT and cyber security frameworks, regulatory requirements, and best practices.

- Strong analytical skills and the ability to assess complex technical environments.

- Excellent communication and interpersonal skills to interact effectively with stakeholders at all levels.

- Proven experience in leading audit teams and managing multiple projects simultaneously.

- High level of integrity, ethics, and attention to detail.

- Ability to adapt to evolving technology and cyber threats.