Reserve Bank Information Technology Jobs 2019: 03 Information Systems Auditor, Cyber Security Auditor, Application Security Auditor Vacancy for B.Tech/B.E, BCA, B.Sc published on 7th February 2019

1. Education: Graduate in B.E. or B. Tech or BCA or Computer Science/IT.

2. Experience: 5 + years of experience in Audits and Risk assessment services of IT infrastructure, Applications, IT processes, Business Continuity and Governance Must have at least 2 years of ISO 27001 and/or PCI-DSS audits of Information Systems in a medium to large sized enterprises. Experience in reviewing business process for information security risk will be a plus. Candidate should have hands-on experience in Test of design controls and Test of operating effectiveness review of IT operational controls. Candidate should be familiar with Technical Security controls of Identity & Access Management, Network, Server, Application and process controls reviews. Must have experience in conducting risk assessment of business and support applications.

3. Responsibilities:
a. Developing project plans, work programs, evaluating IT.
b. Systems controls, documenting results, making recommendations and communicating information to stakeholders.
c. Conduct Information System audits for regulated entities as per the schedule.
d. Review/Assess the security architecture, IT security controls for compliance against published framework and standards.
e. Audit IT processes including change management, configuration management, backup management, identity & access management, capacity management and security incident management.

1. Education: Graduate in Computer Science/IT or B. Tech or BCA. 

2. Experience: 5 + years of experience in audits and assessment services of organizations based on ISO and PCI standards Must have experience in conducting audit based on payment security standards in banking sector for a medium to large sized organization. Must have experience in conducting risk assessment covering Cyber Security domains. Excellent organizational, communication and interpersonal skills. Ability to work independently or as part of a team.

3. Responsibility:
a. Developing project plans, work programs, evaluating IT System controls effectiveness, documenting observations and communicating information to stakeholders.
b. Audit cyber security program effectiveness - policy for completeness, effectiveness of periodic reviews, Governance of management, Security Awareness and Training.
c. IT process effectiveness – Information and Asset Management, Third party security risk management, threat/vulnerability management & change/configuration Management.
d. Conduct audit of risk assessment and its effectiveness in a regulated entity.

1. Education: Graduate in Computer Science or B. Tech or BCA.

2. Experience: 5 + years of experience in Audits and Risk assessment services of web and client based applications, Must have experience in conducting risk assessment of business and support applications, At least 2 years of experience in mobile applications assessment/audits in a medium to large enterprise, Must have hands-on experience in evaluating OWASP security practices for applications. Must have experience in Coding and application development.

3. Responsibility:
a. Developing project plans, work programs, evaluating system controls, documenting results, making recommendations, and communicating information to stakeholders.
b. Conduct Audit of the web, mobile and client based applications- internal and those exposed to the Internet.
c. Audit of application design components, User Access Control, Website communication, application layer, interfaces to databases etc.
d. Audit change management, patch management, incident management, backup management.
e. Audit the development practises (S-SDLC) and coding practises.