Airtel Payments Bank - Information System Audit Manager

Purpose of the Job:

The incumbent will be responsible for conducting and monitoring Information Systems audit for the bank.

Total Experience: 10 - 12 years

Responsibilities:

• Carry out Information System (IS) Audit planning using the Risk Based Audit Approach.
• The approach involves IT risk assessment methodology, defining the IS Audit Universe, scoping and planning the audit, execution and follow up activities.
• Assist in the preparation of the annual IS Audit Plan and strategy in compliance with external regulatory requirements and IS Auditing Standards for Audit Committee approval.
• Handle independent execution of IS audits and IT Application audits within the bank and Vendor onsite/offsite IS audits.
• Responsible for follow up and closure on Audit Tracking Reports (ATR).
• Assist in reporting on the status of planned versus actual IS audits to the Audit Committee and Senior management.
• Establish a quality assurance process to understand the auditee's needs and expectations.
• Close co-ordination and oversight on the work performed by external IS audit partners.
• Promote and enhance utilization of CAATs to increase the efficiency and effectiveness of the audit.
• Assist in initiatives taken by Internal Audit and special projects.

Key competencies:

• Understanding of IS Audit Universe to ensure holistic coverage across Application Systems, Information, Infrastructure, and People.
• Understanding of audit and risk aspects related to IT Governance, IT Operations, IT Outsourcing, Application Control & Security, Pre and post implementation application control audits, data migration audits, Change Management, Logical Access, BCP/DR, and Data centre controls.
• Strong understanding of the regulatory framework and guidelines applicable to Information Technology and Information Systems Audit for Banks.
• Relevant knowledge of Information Systems, IS Controls and leading audit practices.
• Ability to assess the ultimate impact of deficiencies identified in the IT Internal Control framework.
• Understanding of various fraud risk factors and ability to assess associated risks and controls.
• Ability to exercise due professional care following professional auditing standards.
• Competence, skills, knowledge, training and relevant experience in technology and IS audit domain.

Educational Level:

• B.E/B.Tech/MCA, Master's Degree.
• Certifications like ISO27001/ CISA / CIA / Certified Cyber Security will be an added advantage.