IT & Cyber Security Audit Track Leader

Gurugram, India
Payment – Payments India- Internal Audit /
Full-time /
Hybrid
About PayU 
PayU, a leading payment and Fintech company in 50+ high-growth markets throughout Asia, Central and Eastern Europe, Latin America, the Middle East and Africa, part of Prosus group, one of the largest technology investors in the world is redefining the way people buy and sell online for our 300.000+ merchants and millions of consumers. 

As a leading online payment service provider, we deploy more than 400 payment methods and PCI-certified platforms to process approximately 6 million payments every single day. 

Thinking of becoming a PayUneer and you are curious to know more about us? Read more about the life in PayU here 

About the Role:

    • We are looking for an experienced internal audit professional who can lead our efforts for the IT and Cyber security audit track and provide independent assurance to the senior management about the security and resilience of PayU India’s IT infrastructure and applications. As our IT audit track leader, you would also be responsible to continuously monitor, plan and timely deliver all regulatory mandates pertaining to system and information system audits throughout the year.

About the team:

    • This role would be a part of our third line of defense team at PayU Payments Private Limited and would directly report to the Head of Internal Audit.

What you’ll be doing:

    • 1. Audit planning
    • Assist the Head of Internal Audit in the day-to-day running of the IT security audits
    • Lead the audit planning efforts and develop risk-based audit plans based on annual risk assessments
    • Continuously improve the IA documentation and keep them aligned to the Global IIA standards (ex. IS audit framework and policy, manual, methodology, etc.)

    • 2. Audit delivery
    • Plan, organize and supervise the conduct of all IT security audit projects
    • Follow agile auditing approach to deliver high quality outcomes
    • Lead or perform audit work as per prescribed policies, procedures and standards
    • Prepare reports and management presentations to reflect the outcomes of the IT audits with a focus on key risks
    • Document audit fieldwork and own the quality of working papers with an aim to consistently maintain the golden standard
    • Work closely with co-sourced partners to steer the audit delivery to meet audit objectives and timelines
    • Stay informed, adopt and implement the best-in-class audit practices and solutions to automate audit testing (ex. AWS Audit Manager)
    •  
    • 3. Deliver value

    • Make S.M.A.R.T recommendations to improve processes, follow-up on recommendations, and escalate when needed to ensure timely closure of actions
    • Ensure all audits exceed expectations during internal and external quality assurance checks
    • Write high quality audit reports which are praised for their factual accuracy, brevity and clarity
    • Complete IA self-assessments with consistently improving outcomes year-on-year

What are we looking for?

    • A qualified candidate with min. of 12 to 14 years of IT and Cyber security auditing experience
    • Bachelor’s degree in Engineering, Computer Science or Information Systems or an equivalent degree
    • Good understanding of regulatory and statutory expectations incl. System and IS Audits
    • In-depth experience to handle regulatory audit mandates for various products/licenses, e.g. SARs
    • Strong knowledge of global security standards and frameworks
    • Proficient with data analytics and good familiarity with data visuatlisation tools
    • Proactive, independent, resourceful and self-motivated with excellent written and verbal communication skills
    • A self-starter and fast learner who can work with a small entrepreneurial team of auditors in a fast-paced environment with a focus on delivery and output
    • Ability to interact, collaborate and challenge teams on the existing IT security practices
    • Someone who holds high degree of ethics and integrity through any situation
    • Globally recognized certifications in technical secutity areas incl. cloud, cyber, application, database and network security would be preferred

What we offer (Standard)

    • A positive, get-things-done workplace
    • A dynamic, constantly evolving space (change is par for the course - important you are comfortable with this)
    • An inclusive environment that ensures we listen to a diverse range of voices when making decisions.
    • Ability to learn cutting edge concepts and innovation in an agile start-up environment with a global scale
    • Access to 5000+ training courses accessible anytime/anywhere to support your growth and development (Corporate with top learning partners like Harvard, Coursera, Udacity)
About us
At PayU, we are a global fintech investor and our vision is to build a world without financial borders where everyone can prosper. We give people in high-growth markets the financial services and products they need to thrive. Our expertise in 18 high-growth markets enables us to extend the reach of financial services. This drives everything we do, from investing in technology entrepreneurs, to offering credit to underserved individuals, to helping merchants buy, sell and operate online. Being part of Prosus, one of the largest technology investors in the world, gives us the presence and expertise to make a real impact. Find out more www.payu.com 

Our Commitment To Building A Diverse And Inclusive Workforce 
As a global and multi-cultural organization with varied ethnicities thriving across locations, we realize that our responsibility towards fulfilling the D&I commitment is huge. Therefore, we continuously strive to create a diverse, inclusive and safe environment, for all of our people, communities and customers. Our leaders are committed to create an inclusive work culture which enables transparency, flexibility and unbiased attention to each and every PayUneer so they can succeed, irrespective of gender, color or personal faith. An environment where every person feels they belong, that they are listened to, and where they are empowered to speak up. At PayU we have zero tolerance towards any form of prejudice whether a specific race, ethnicity, or of persons with disabilities or the LGBTQ communities.