AVP - IT Internal Audit

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

Position Title : AVP- Internal Audit IT Infrastructure

Corporate Title: Associate/Assistant Vice President, Internal Audit

Reporting to : VP/ Director

Shift timings: 1.30 PM to 10.30 PM

Location : MGS - Bengaluru

The AVP role within the Internal Audit function is responsible for executing independent, objective assurance and consulting activities designed to assess and evaluate the effectiveness of the Bank’s governance, risk management and control processes.  It reports to either a VP, Audit Lead or a Director, Sr. Audit Lead.  This role includes, but is not limited to, execution of end-to-end audit process (e.g. planning, fieldwork testing, reporting, issues validation, etc.) and independently owning audit administration activities and project deliverables across the organization.

• Maintain compliance with audit methodology, while also operating within industry best practices, applicable regulations, and internal and external professional practice expectations. 
• Act as a leader and role model and continuously improve self and department. 
• Build relationships with peers and clients within organization and exhibit a high standard of performance and professional conduct that will create a culture of integrity and inclusion, where all individual and departmental choices are rooted in good judgment and support MUFG's Principal of Ethics and Conduct. 
• Operate with an innovative and flexible mindset by continuously identifying ways to enhance consistency, efficiency, quality and/or value. 
• Demonstrate professional skepticism and personal accountability. 
• Lead walkthrough meetings and interviews with business stakeholders to develop an understanding of business processes. 
• Lead formal discussions with business stakeholders throughout the duration of audit engagements to communicate status or concerns. 
• Identify potential risks and controls and assist in developing scope and work programs. 
• Evaluate design and operational effectiveness of internal controls and identify control weaknesses. 
• Generate insightful, meaningful observations that effectively convey significance and impact on risk and/or risk management practices, reporting findings and audit issues to Audit Management. 
• Prepare workpapers and audit reports with documented results that adhere to methodology, applicable standards and regulatory requirements, using appropriate business and technical language. 
• Document workpapers demonstrating the work was appropriately performed (e.g., detailed lead sheets describing the control attributes that were tested, and the results were documented in a manner to support the conclusions reached, effectiveness and sustainable controls are evident in documentation). Documentation should stand alone to enable re-performance. 
• Identify control weaknesses and escalate and discuss findings with Audit Management and business stakeholders as appropriate. 
• Complete work on a timely basis and deliver work products that meet objectives and standards of methodology, applicable standards and regulatory requirements. 

• A bachelor’s degree, preferably in Computer Science, Information Systems, Engineering or related business discipline at an accredited college or university.
• Relevant certifications, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP) preferred.

• Minimum of 7 years and/or equivalent of experience of internal audit and/or equivalent of experience with the financial services industry, related markets, and related regulatory agencies. 
• Experience preferred in IT audit.
• Working Knowledge in one or more of the following area:
• IP networks infrastructure (network topology, switches, routers, firewalls, intrusion detection / prevention)
• Windows Active Directory, Azure and LDAP (policies, structure, elements)
• Databases (SQL, Oracle, DB2, monitoring tools)
• Mobile and DLP technologies (Data Leakage Prevention, BYOD security)
• Cloud Computing
• Standards / Frameworks (e.g., CoBIT 5, ITIL, NIST series 800 guidance, FFIEC)
• Exhibits effective communication (both verbal and written), negotiation and presentation skills; strong interpersonal skills; and ability to engage with all levels of internal audit and business line management.
• Strong analytical and problem-solving skills.
• Employs critical thinking skills to identify pragmatic recommendations within an evolving and increasingly complex regulatory and risk management environment.
• Proficiency in technology as required for assigned areas (MS Office, audit data analytics, etc.).