Lead Auditor, Information Systems Audit

Profile description: 

As an auditor, and as part of your audit assignments, you are expected to: 

• Master IS environment in your current job and more specifically some of the following IT audit domains with related SG IT processes: security of information systems, IT infrastructures, applicative architectures, operating systems (OS), networks, virtualization, private/public Cloud, storage, databases, Big Data mechanisms, middleware. Additionally, and in link with your current job, master one of the bank’s information systems, whether from central functions (CPLE, HRCO, RISQ, DFIN or other central functions) or GBIS to integrate one of those 2 dedicated teams.
• Be able to identify and assess risks or a specific risk and understand the issues of the audited business/domain/subject. By example: 
  • To understand IT governance and internal or external security frameworks and their application in audit contexts.
  • To perform IT Controls testing (i.e access management, change management, backup/recovery processes, resiliency …).
  • To understand applicative architecture and monitoring mechanisms to evaluate system design, dependencies, and performance oversight.
  • To assess cybersecurity risks and evaluate controls related for instance to network security, identity management, and data protection.
  • To understand regulatory requirements (e.g., GDPR, local banking IT regulations) and review compliance of the entity audited.
  • To evaluate cloud and third-party service risks, including contractual and operational controls.
• Develop audit methodologies knowledge, learn and apply internal processes and contribute to their optimization, as well as data analysis and process approaches,
• Contribute to the overall mission diagnosis,
• Lead and/or participate in interviews with auditees,
• Perform controls and propose conclusions.
• Play an active role in writing the report in English and actively participate in debriefings with auditees,
• Ensure the follow-up of the implementation of your recommendations,
• Conduct research and develop methodologies in your area of expertise,
• Train and support more junior auditors, especially on data analysis tools,
• Be involved in several cross-functional topics (risk assessment, recruitment, training, internal projects, etc.). 

Where required, the auditor will contribute to the continuous risk assessment within their scope. This contribution is materialized by producing interview summaries with auditees. 

As a member of one of the eams, the auditor is expected to contribute to cross-functional actions aimed at improving team life and its functioning, under the supervision of a supervisor. They may participate in and possibly coordinate initiatives on behalf of the team or more broadly for " recruitment or communication actions, event organization, improvement of audit practices, knowledge sharing, etc. 

In collaboration with their hierarchical and/or functional manager, the auditor is responsible for training in banking professions and associated risks, and for completing mandatory regulatory training within the deadlines set by the department. The auditor reports hierarchically to a GSC India supervisor and functionally to a BC. They are both co-responsible for the auditors’ professional support, career development, and annual evaluation against set objectives. Strict compliance with instructions, standards, and norms disseminated by the Business Correspondent, Supervisors, and COOs is expected, as well as proper use of tools. 

Degree of Autonomy: 

The auditors have good autonomy in the assigned tasks. They must ensure a perfect audit trail of the work performed and report appropriately to the lead auditor. 

Required Behavioral Skills: 
The auditor must demonstrate impartiality, ethics, transparency, and team spirit to successfully carry out their assignments. They must show perspective, curiosity, critical thinking and analytical skills. 

Other Technical Skills 

Ability to write fluently in English and have fluent oral communication. 

Use of data analytics tools (e.g., Power BI, Python) is required. 

IT Domains: Security of information systems, IT infrastructures, Applicative architectures, Operating Systems (OS), Networks, Virtualization, Private/Public Cloud, Storage, Databases, Big Data mechanisms, Middleware, Cyber Security 

Knowledge of bank’s information systems: Corporate Functions or Investment Banking 

Educational requirements and certifications: 

Master’s degree in computer science / information systems 

Professional certification such as CISSP, CISM, OSCP, CCNA, Azure and AWS are a plus. 

Profile 

  Master’s degree in computer science / information systems, with 7-10 years of work experience in Information Systems Internal audit or IT operations, preferably with exposure to the Banking and Financial Services industry. 

Lead or contribute on an audit assignment, working with global teams within team, and manage senior stakeholders in business. 

Other Technical Skills 

• Ability to write fluently in English and have fluent oral communication.
• Use of data analytics tools (e.g., Power BI, Python) is required.
• IT Domains: Security of information systems, IT infrastructures, Applicative architectures, Operating Systems (OS), Networks, Virtualization, Private/Public Cloud, Storage, Databases, Big Data mechanisms, Middleware, Cyber Security
• Knowledge of bank’s information systems: Corporate Functions or Investment Banking 

Professional certification such as CISSP, CISM, OSCP, CCNA, Azure and AWS are a plus.