Chief Risk Officer

About the Team:

The Governance & Control team is responsible for overseeing internal audits across various domains, ensuring compliance with internal policies and regulatory requirements. The team proactively addresses audit findings and implements corrective actions to strengthen internal controls.

About the Role:

This role drives the IT audit strategy across entities, ensuring alignment with organizational risks and regulatory expectations. It plays a critical part in strengthening internal controls, enhancing IT governance, and providing independent assurance through proactive risk identification and audit oversight.

Key Responsibilities:

• Own the development and implementation of risk-based annual IT audit plans and ensure they are responsive to and aligned with the risk profile of the organization.
• Lead evaluations of IT infrastructure and establish controls and audit procedures to identify areas of risk or non-compliance.
• Ensure proper resourcing for implementation of the plan and adjust it as needed in response to changes in business risks, operations, programs, systems, and controls.

Process Development:

• Develop and update audit tools by considering guidelines and different operational, legal, and environmental changes.
• Proactively inform senior management of significant risks or exposures related to internal controls, compliance, and governance requiring prompt attention.
• Provide feedback and recommendations on IT and data risks and improve operational efficiencies and processes where appropriate.

Leadership:

• Maintain good relationships and work collaboratively with all key stakeholders.
• Oversee Internal Audit's participation in critical business and technology initiatives and projects ensuring that audit's perspective is effectively voiced and appropriate controls are designed and implemented.
• Serve as a 'thought leader' with respect to IT risk management and internal control best practices.

Operational Management:

• Continuously inspect and assess information systems and implement audit test plans.
• Identify and evaluate IT risk exposure and recommend remediation strategies.
• Review security measures taken by line functions and new business initiatives.
• Coordinate with external auditors and regulators and provide independent assurance on the IT framework and associated controls.
• Track issues and actions management process and ensure timely closure.
• Identify early warning signals in IT areas and potential fraud scenarios for in-depth review and investigation.
• Benchmark company systems to other available technologies on the market and strengthen the company further through use of technology.

Reporting:

• Issue IT Audit reports in a timely manner ensuring the reports are clear, concise, identify root causes with practical solutions, and ultimately provide value to management.
• Ensure timely delivery of MIS, reports, and data to assist the Function Head.
• Prepare materials and make presentations to the audit committee and management independently.

We're seeking a candidate with:

• A strong background in IT audits, preferably with experience in team management.
• CISSP, CISA, CISM, GIAC, PPM, PMP, DISA, or equivalent IT audits-related qualification.
• 7+ years of experience in IT audits (with 2-3 years in a team management role).
• Strong knowledge of IT security and infrastructure.
• Experience working or auditing in agile product management environments.
• Good expertise of RBI and/or IRDAI guidelines on IT frameworks and sensitive data protection (preference).

We offer a dynamic work environment with opportunities for growth and professional development. You'll thrive here if:

• You're impact-driven: take ownership, build boldly, and care about making a real difference.
• You strive for excellence: good isn't good enough; bring focus, precision, and a passion for quality.
• You embrace change: adapt quickly, move fast, and always put the customer first.