About the role

The individual will be responsible for executing IT security audits, ensuring adherence to ISMS and ITGC controls, and identifying potential security risks. The role involves conducting security assessments, ensuring regulatory compliance, and assisting in strengthening the bank’s cybersecurity framework.

What you will do

• Conduct risk-based IS audits across the bank to ensure compliance with ISO 27001, RBI cybersecurity guidelines, and industry best practices.
• Assess IT controls across applications, networks, cloud environments (AWS), APIs/microservices, containers (Docker/Kubernetes), and endpoint security.
• Ensure adherence to RBI cybersecurity circulars, CSITE, and CERT-IN requirements.
• Evaluate security governance, third-party risk management, data privacy, and infrastructure security controls.
• Identify cybersecurity risks, vulnerabilit...