Associate Manager - IT Auditor

Location: Bengaluru

About the Team

The IT Audit team at Navi provides independent and objective assurance to the Board and senior management on the effectiveness of governance, risk management, and internal controls. The team plays a critical role in strengthening control maturity across business and technology functions, while enabling Navi to scale responsibly in a highly regulated environment.

As part of the IT Audit function evaluates risks across applications, infrastructure, cloud environments, data, and third-party ecosystems, with a strong focus on regulatory compliance, operational resilience, and control effectiveness.

About the Role

Navi is looking for an IT Auditor to join the team. This is an entry-level role designed for professionals who demonstrate a strong auditor mindset, professional skepticism, and a willingness to challenge processes constructively.

The role will support execution of technology and information security audits across Navi’s businesses, covering IT general controls, application controls, cloud security, regulatory compliance, and third-party risk. You will work closely with technology, product, operations, and compliance teams, while maintaining independence expected of an Internal Audit function. The role offers exposure to regulatory expectations from RBI, IRDAI, SEBI, and NPCI, and provides a strong foundation in risk-based auditing.

What We Expect From You

IT Audit Execution

- Perform end-to-end execution of IT and Information Security audits, including audit planning, walkthroughs, control testing, documentation and reporting.
- Evaluate design and operating effectiveness of IT general controls, application controls, and information security controls.
- Apply a risk-based audit approach to identify control gaps, assess impact and root cause, and articulate audit observations clearly.
- Maintain audit working papers, evidence repositories, and issue trackers in line with Internal Audit standards.

Technology Risk

- Assess risks across cloud platforms, applications, infrastructure, identity and access management, logging and monitoring, and data protection controls.
- Review BCP and DR controls from an audit and assurance perspective.
- Support follow-up audits and validation of management action plans.

Regulatory and Compliance Audits

- Support audits and reviews aligned to regulatory expectations issued by RBI, IRDAI, SEBI, and NPCI.
- Assist in evaluating compliance with internal policies, standards, and regulatory requirements.
- Support Internal Audit responses and coordination during regulatory inspections and external audits, where applicable.

Stakeholder Management and Reporting

- Engage with technology, engineering, infrastructure, and business teams to understand processes and controls.
- Ask probing questions, challenge control design and effectiveness, and seek evidence-based responses.
- Draft clear, concise, and well-structured audit observations and risk summaries for Internal Audit reports.

Must Haves

Auditor Mindset

- Strong inclination toward independent thinking, professional skepticism, and attention to detail.
- Willingness to challenge existing processes and controls respectfully and objectively.
- Ability to think in terms of risk, impact, root cause, and control effectiveness rather than checklist-based compliance.

Soft Skills

- Good communication skills, both written and verbal.
- Ability to manage multiple audit tasks and meet timelines.
- Comfort working with diverse stakeholders while maintaining audit independence.
- Strong learning orientation and curiosity about technology, risk, and regulation.

Technical and Functional Skills

- Foundational understanding of IT controls, information security concepts, and technology risk.
- Familiarity with audit or control frameworks such as ISO 27001, COBIT, SOC 2, or PCI DSS is a plus.
- Basic exposure to cloud environments, application architecture, or infrastructure concepts is preferred.
- Ability to document audit work clearly, logically, and defensibly.

Qualifications

- Bachelor’s degree in Engineering, Technology, Information Systems, or a related field.
- 0–5 years of experience in IT audit, internal audit, risk, compliance, or a related…