CISO - Internal Audit

Main objective being –

• Undertake CISO role any ensure regular monitoring of email communication,USB,any other policy exceptionetc.
• Internal audit system/IT audit co-ordination and driving quality of audit with business and internal audit firms.
• Objectively review business IT risk leading to business risks and help in mitigation etc.
• Review and drive control related automation IT infrastructure, application, SAP configuration controls audits. Help management in improvement of efficiency of operation.
• Protect against loss/fraud by establishing process of red flag, exception reporting/data analytics etc. Pro-active internal audit intervention for control improvements/automated controls.

Key Challenges

• Developing and maintaining information security monitoring and audit processes and controls that meet requirements of control framework without compromising business growth and operational efficiency
• Incumbent takes decisions on operational aspect of the audit programme to be exercised.
• Role for developing effective operating systems
• Role to support and exploit synergies and maximise value from audit deliveries
• Lead automation and IT audits in order to have pro-active audit intervention etc.

• Interactions: Internal Interactions-Functional HOD’s on an assignment basis and support team etc. interaction at all level, External, vendor etc. where required.

Key Responsibilities

• Develop and execute a comprehensive IT audit strategy aligned with organizational objectives and regulatory expectations.
• Establish risk-based IT audit plans covering applications, infrastructure, cybersecurity, digital initiatives, and emerging technologies.
• Lead end-to-end IT audits, including planning, fieldwork, reporting, and follow-up.
• Assess IT general controls, application controls, database security, access management, and change management processes.
• Present IT audit findings and recommendations to executive management and the Audit Committee.
• Partner with IT and Business leaders to ensure timely remediation of identified issues.
• Maintain strong relationships with external auditors and regulators.
• Monitor regulatory developments and assess impact on IT controls.
• Provide assurance over IT projects, digital transformation initiatives, and vendor risk management.
• Foster a culture of continuous learning, innovation, and professional excellence.

Key Skills & Competencies

• Strong knowledge of IT and Information Security frameworks (COBIT, ISO 27001, NIST, ITIL).
• Expertise in cybersecurity, cloud computing, SAP systems. advanced knowledge IT including SAP-MM, FI, and SD module and audit tools.
• Expert knowledge of MS, Excel.
• Strong analytical and problem-solving skills with ability to interpret complex IT risks.

Qualifications, Experience

• Bachelor’s degree in Information Technology, Computer Science, or related field.
• Professional certifications: CISM, CISSP, CISA (preferred). Additional commercial qualification such as C.A, CFA etc. will be added advantage

1. 10 - 12+ years of experience in IT Audit, Technology Risk,Information Security.

Behavioural Skills

• Analytical/ Probing Skills, Conceptual thinking, Aptitude to pick up new practices and concepts quickly.High levels of Initiative, Integrity and Self Confidence and presentation skill.

• Bachelor’s degree in Information Technology, Computer Science, or related field.
• Professional certifications: CISM, CISSP, CISA (preferred). Additional commercial qualification such as C.A, CFA etc. will be added advantage