Job Location

Jaipur, Rajasthan

JD Key Responsibilities

Execute risk-based IS audits covering IT governance, cybersecurity, and regulatory compliance.

Review DR site readiness, BCP documentation, and failover drills.

Assess vendor risk management, outsourcing agreements, and SLA adherence.

Audit data security practices: classification, masking, disposal, DPDP Act compliance.

Evaluate SDLC, application security baselines, and change management processes.

Review cloud architecture, network security, database controls, and IT asset management.

Validate backup, restoration, and log retention practices.

Perform IAM audits: provisioning, privileged access, SoD enforcement.

Monitor vulnerability management, endpoint security, SIEM/SOC alerts, and cyber threat intelligence.

Prepare detailed audit reports with observations, root cause, and recommendations.

Specification & Key Requirements

Education

B.Tech in IT/Computer Science, BCA/MCA OR equivalent

Specialized Knowledge

RBI IT Governance Directions, DPDP Act, Digital Lending Guidelines

IS frameworks: COBIT, ISO 27001, NIST, ITIL

Cybersecurity and risk-based audit methodology

Skill Set (Must)

Strong understanding of IT infrastructure, cloud, network, and application security

Audit planning, execution, and reporting

Regulatory compliance mapping (RBI, DPDP)

Analytical and problem-solving skills

Skill Set (Desired)

Familiarity with SIEM tools, SOC processes, and vulnerability assessment

Knowledge of scripting for audit automation (Python, SQL basics)

Technical Skills

ITSM tools (ServiceNow/Jira), SIEM, DLP, IAM solutions

MS Excel, PowerPoint for reporting

Professional Certifications (Preferred)

CISA / ISO 27001 Lead Auditor

Experience Range

35 years in IS Audit / IT Risk / Cybersecurity Audit

Abilities

Excellent communication and stakeholder management

Ability to interpret technical risks into business impact

Strong documentation and presentation skills

Preferred Industry

NBFC / Banking / Financial Services / IT Services

Language Proficiency

English (mandatory)

Information Systems Internal Auditor