Infrastructure Audit Lead

JOB PROFILE

Position

Location	Noida
Reporting Mgr. Name	Sushil Kumar
Department	IT Operations
Reporting Mgr. Designation	Infrastructure Head
Offered Grade

Our Purpose

At Niva Bupa, our purpose is “to give every Indian the confidence to access the best healthcare”

Our Values

• Commitment
• Innovation
• Empathy
• Collaboration
• Transparency

Proficiency Level

(Please Tick)

• L1: HEAD OF FUNCTION/BUSINESS (Sr. Leadership Team)
• L2: MANAGER OF MANAGER
• L3: MANAGER
• L4: INDIVIDUAL CONTRIBUTOR

About Niva Bupa Health Insurance Company

Niva Bupa Health Insurance Company Limited (formerly known as Max Bupa Health Insurance Company Limited) is a joint venture between Fettle Tone LLP (an affiliate of True North Fund VI LLP), a leading Indian private equity firm, and the Bupa Group, a leading international healthcare company with a legacy of providing specialized healthcare services for over 70 years.

Niva Bupa’s growth story has been phenomenal. We are one of the fastest growing Stand Alone Health Insurers in the country with a current employee strength of 7000+ with growth rate of 154% since FY 20 and growing. We are a fully integrated health insurance provider with in-house claims processing; underwriting and servicing. Our goal is to achieve more than 10000 Cr GWP By 2027 & thus requires goal oriented individuals to be a part of this exciting growth journey to achieve it.

Niva Bupa is certified Great Place to Work for the 3rd year running and aims to become one of the best workplaces in the BFSI industry.

Niva Bupa is an Equal Opportunity Employer committed to achieving diversity within its workforce, and encourages all qualified applicants to apply, irrespective of gender, age, sexual orientation, disability, culture, religious and ethnic background. At Niva Bupa 12% of our team handling roles are led by women. We welcome specially-abled professionals to join our team.

ESG: Supporting action to protect, restore and regenerate local environments for the benefit of our customers our people, our communities and wider society

For more Details visit our website- www.nivabupa.com

Job Summary

We are seeking a highly organized and technically adept Infrastructure Audit Lead to act as our Single Point of Contact (SPOC) for all infrastructure-related audit activities. In this role, you will bridge the gap between internal/external auditors and our core IT Infrastructure teams.

Your primary responsibility will be triaging audit points—analyzing findings, validating their actual risk, assigning accountability, and tracking remediation to completion. The ideal candidate has a strong background in IT infrastructure operations, an analytical mind for compliance/risk frameworks, and the communication skills to manage diverse stakeholders.

Key Roles & Responsibilities

• Audit Orchestration & SPOC Management: Act as the primary, central point of contact (SPOC) for all internal, external, regulatory, and client-led infrastructure audits. Coordinate audit timelines, schedule walkthroughs, and manage the end-to-end evidence collection process across networking, cloud, data centers, and endpoint management teams. Ensure all evidence provided to auditors is accurate, complete, and properly contextualized.
• Analyze and Triage: Critically review raw audit findings and points to understand the underlying technical gap.
• Risk Validation: Challenge or validate audit points based on actual operational risk and existing compensating controls.
• Ownership Assignment: Properly route validated audit points to the correct infrastructure engineering or operations teams.
• Remediation Tracking & Governance: Collaborate with technical teams to draft realistic, robust Management Action Plans (MAPs) and Root Cause Analyses (RCAs). Monitor remediation progress vigorously, ensuring all audit points are closed well before their target due dates. Establish regular governance dashboards and KPIs to report audit posture, overdue items, and systemic risks to IT leadership.
• Continuous Compliance: Identify recurring audit themes and work with infrastructure teams to build long-term, automated controls to prevent reoccurrence. Maintain a centralized, searchable repository of all historical audit data, evidence templates, and past findings.

Key Requirements – Education & Certificates

Bachelor’s degree – BTech or equivalent

Key Requirements - Experience & Skills

• Technical & Audit experience: 5–8+ years of experience in IT Infrastructure operations, IT Risk, IT Audit, or Cyber Security Compliance.
• Domain Knowledge: Solid foundational understanding of infrastructure concepts (e.g., Active Directory, Patch Management, IAM, Network Segmentation, Cloud Security [AWS/Azure], Backup & Disaster Recovery).
• Frameworks: Familiarity with industry audit and security standards (e.g., ISO 27001, SOC 2, NIST, CIS Controls, COBIT, or SOX ITGC).
• Negotiation & Influence: Proven ability to negotiate the scope of audit findings with auditors and influence busy engineering teams to prioritize remediation.
• Project Management: Excellent tracking and organization skills; experience using tools like Jira, ServiceNow (GRC modules), or Archer is highly preferred.
• Communication: Ability to translate complex technical jargon into clear risk-based language for auditors and executives.

Nice to have

• CISA (Certified Information Systems Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• ITIL Foundations
• PMP or Scrum Master certifications

Behavioral

• Ownership and Accountability: Takes full responsibility for Audits.
• Collaboration and Influence: Works effectively across internal teams and external vendors.
• Communication: Communicates technical issues clearly to both technical and non-technical audience.
• Analytical Thinking: Uses structured thinking and data-driven approach to solve problems, assess risks and make recommendations.
• Adaptability: Thrives in dynamic environment.

Key Functional Competencies

Functional competency	Beginner	Intermediate	Expert

NBHI Core Competencies

Behavioral Competency	Beginner	Intermediate	Expert

Targets/ KRA/ KPI

Goals	Measures of Success	Weightage
Company MOS	Defined as per Company Policy	Defined as per Company Policy

Functional Hierarchy/ Reporting Matrix

Hiring Manager has to inform the TA Team about the Reporting manager’s grade and the candidate’s grade. (Reporting Manager and Prospective New Hire Grade to be clearly mentioned below)