TransUnion CIBIL Limited

Dynamics of the RoleLead end-to-end integrated audits covering business processes and IT controls across the CIC environment (core bureau platforms, data acquisition & furnishing systems, analytics, and customer-facing channels). Provide assurance on regulatory compliance, data privacy, information security, data quality, and operational resilience while delivering pragmatic recommendations that enhance control effectiveness and business outcomes.Roles & Responsibilities1) Audit Planning & Risk Assessment<ul style="text-align: justify;"><li>Develop risk-based audit plans for business–IT processes (credit data lifecycle, data furnishers, disputes, scoring/analytics, customer services, collections).</li><li>Perform integrated risk & control assessments considering business objectives, regulatory requirements (e.g., CICRA, DPDP), InfoSec controls, and technology dependencies.</li><li>Define audit scope, objectives, criteria, sampling, and test strategies; prepare audit programs and timelines.</li></ul>2) Fieldwork – Integrated Control Testing<ul style="text-align: justify;"><li>Evaluate process controls (authorization, segregation of duties, maker-checker, reconciliations, exception handling).</li><li>Test IT general controls (ITGC): access management, change management, backup/recovery, incident/problem management, logging/monitoring.</li><li>Assess application controls: input/processing/output, interfaces, batch jobs, data validations, score computation integrity, and error handling.</li><li>Review data governance & quality: lineage, completeness/accuracy, transformation rules, reconciliations between source → staging → bureau systems.</li><li>Validate information security controls: IAM, encryption/keystores, network segmentation, secure configurations (servers, DB, middleware), vulnerability management, patches.</li><li>Examine third-party & cloud risks: onboarding diligence, SLAs, security posture, data processing agreements, resilience and DR.</li><li>Perform walkthroughs & stakeholder interviews; obtain and analyze evidence (configs, logs, tickets, reports, dashboards).</li><li>Proficient in conducting comprehensive vendor audits.</li></ul>3) Regulatory & Compliance AssuranceIdentify control gaps and non-compliance, quantify risk (likelihood/impact), and propose actionable remediation with owners and timelines.4) Reporting & Communication<ul style="text-align: justify;"><li>Draft clear, concise audit reports (executive summary, observations, root cause, risk rating, evidence, recommendations).</li><li>Present findings to process owners, CIO/CTO functions, Risk & Compliance, and senior leadership; obtain agreement on Management Action Plans (MAPs).</li><li>Maintain audit documentation on Audit Board (or equivalent), ensuring completeness and traceability.</li></ul>5) Follow-up & Issue Closure<ul style="text-align: justify;"><li>Track remediation progress, validate implemented controls, and update status for ITSC / Audit Committee reporting.</li><li>Provide practical guidance and control design (without assuming management responsibility) to accelerate sustainable fixes.</li></ul>6) Continuous Improvement<ul style="text-align: justify;"><li>Contribute to Continuous Audit Monitoring (CAM) and audit automation (analytics scripts, control dashboards).</li><li>Develop and share audit analytics (e.g., exception trends, access anomalies, batch job failures, data quality KPIs).</li></ul>Experience and Skills· Bachelor’s degree in engineering /technology / computer science/information systems or finance/commerce with strong IT audit exposure; Master’s preferred.· 5–8years of internal/external audit experience with at least 3+ years in business–IT integrated audits within BFSI/credit bureau/financial services.· Hands-on experience with ITGC, application control testing, data governance, InfoSec/ISMS, and privacy audits.· Familiarity with RBI regulations for CICs, ISO 27001/27002, NIST CSF, COBIT, and privacy/security best practices.· Experience using AuditBoard, GRC tools, SIEM/log management (e.g., Splunk/ELK), ticketing systems (ServiceNow/Jira), DB query tools (SQL), and data analytics (Excel/Power BI/Python basics preferred).Certifications (Preferred)· CIA, CISA, CISSP (or CCSP), ISO 27001 Lead Auditor/Implementer, CDPSE (privacy), ITIL, COBIT Foundation.· Any data privacy certification relevant to DPDP/GDPR concepts.Essential CompetenciesAbility to build trusting relationships - across all levels and in the immediate / extended team internationally, should be known and regarded as a trusted competent advisor.Driving innovation – A believer in continuous improvement of services, processes and operational efficiency. Demonstrates curiosity and critical thinking.Business Acumen – Spends time to ensure understanding of the business and aligns accordingly.Change agent – Ability to diagnose correctly, design and execute interventions. Ensures communication through appropriate channels in a concise and proactive manner.Execution champion – Focuses and ensures closure without compromising on quality of the output. Raises / flags issues as necessary and moves forward with a solutioning approach

Job Details

Skills Required

More Details

Easy Apply