JOB DETAILS

AVP - IT & Infosec Audit

CompanySBI Card
LocationGurgaon
Work ModeOn Site
PostedAugust 4, 2026
About The Company
SBI Card was launched in 1998 with the State Bank of India, India's largest bank, as the majority stakeholder. In March 2020, SBI Card was listed on BSE and NSE. Today, SBI Card is India’s largest pure-play credit card issuer with over 22.1 million cards in force, as of FY26. Its wide array of products and services caters to a diverse range of customer segments across India, right from new-to-credit to super premium. The SBI Card brand is based on the value proposition of 'Make Life Simple'. The proposition manifests in SBI Card’s continuous efforts to simplify the lives of its customers, employees, and other key stakeholders. Customer centricity, supported by the values of trust and transparency, is core to SBI Card’s ethos.
About the Role

About Us

SBI Card is a leading pure-play credit card issuer in India, offering a wide range of credit cards to cater to diverse customer needs. We are constantly innovating to meet the evolving financial needs of our customers, empowering them with digital currency for seamless payment experience and indulge in rewarding benefits. At SBI Card, the motto 'Make Life Simple' inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone.

SBI Card is proud to be an equal opportunity & inclusive employer and welcome employees without any discrimination on the grounds of race, colour, gender, religion, creed, disability, sexual orientation, gender identity, marital status, caste etc. SBI Card is committed to fostering an inclusive and diverse workplace where all employees are treated equally with dignity and respect which makes it a promising place to work.

Join us to shape the future of digital payment in India and unlock your full potential.

What’s in it for YOU

  1. SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees
  2. Admirable work deserves to be rewarded.We have a well curated bouquet of rewards and recognition program for the employees
  3. Dynamic, Inclusive and Diverse team culture 
  4. Gender Neutral Policy
  5. Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits
  6. Commitment to the overall development of an employee through comprehensive learning & development framework

Role Purpose 

The role is responsible for managing activities pertaining to areas covered under IT and Infosec Audits and providing relevant inputs in the form of risk triggers to respective vertical heads in internal audit in order to assist in risk assessment exercise along with timely updating of relevant dashboards.

Role Accountability 

  1. Manage the activities performed by Internal Audit Vertical - IT, Digital and Infosec Audit 
  2. Assist Vertical Head in preparing IT, Digital and infosec audit plan based on risk assessment after incorporating inputs from all avenues
  3. Monitor & Conduct overall audit activities pertaining to areas covered under IT, Digital and Infosec audits respectively
  4. Perform resource allocation and prepare an execution plan for audits to undertaken during a given year
  5. Develop data models (regression, clustering, optimization) to work on real time machine/process data to derive actionable insights for internal audit vertical as a whole, and for DAU audit unit in particular
  6. Assist respective audit verticals in preparing  final audit presentation for ACB by visualizing data points 
  7. Design and develop descriptive, predictive as well as prescriptive analytics for the IA function
  8. Perform portfolio analytics, segmentation and hypothesis testing necessary sampling etc.
  9. Perform regular updating of internal audit tools to ensure minimum downtime
  10. Ensure adherence to regular process documentation practices in compliance with the process guidelines
  11. Perform complex operational audits, review of entire IT landscape (IT, information security, business applications), IT general controls and compliance audits ensuring adherence to several regulatory mandates
  12. Conduct third party security risk reviews (vendor, supplier risk review/assessment)
  13. Align resources for performing risk assessment and other planning related task
  14. Ensure adequate validation of business contracts, SAs, MSAs, SoW for security obligations and / or information risk 
  15. Ensure regular follow up to close all the open observations and conduct complete ATR process
  16. Ensure quality of audit findings as well as adherence to audit manual/policy/checklists etc.
  17. Devise corrective action plan based on mutual discussion with process owners

Measures of Success 

  1. Creation/updating of triggers as per plan
  2. Timely updating of dashboards
  3. Number of errors/defects identified post UAT
  4. Negative Comments from Quality Assurance Reviews
  5. Timely and accurate updating of process documentation
  6. Process adherence as per agreed MOU

Technical Skills / Experience / Certifications

  1. Strong programming skills and demonstrated history of completing projects using R, Python, VBA , SQL etc. with the ability to handle large un-structured data
  2. Knowledge of data visualization tools (preferably Tableau, QlikView or Power BI)
  3. Knowledge and experience working on Bigdata Platforms (Hadoop, MongoDB etc.)

Competencies critical to the role

  1. Analytical ability
  2. Problem solving
  3. Verbal and written communication
  4. Teamwork and collaboration

Qualification 

Degree in statistical analysis, data science, computer science or any related field

Preferred Industry

FSI

Key Skills
IT AuditInformation Security AuditRisk AssessmentData ModelingPythonRSQLVBATableauPower BIBig DataHadoopMongoDBCompliance AuditsThird-party Risk ReviewAnalytical Ability
Categories
Finance & AccountingTechnologyData & AnalyticsSecurity & SafetyManagement & Leadership
Benefits
Medical insurancePersonal accidental insuranceGroup term life insuranceAnnual health checkupDental benefitsOPD benefitsWellness and wellbeing programRewards and recognition program
Job Information
📋Core Responsibilities
The role involves managing IT, digital, and information security audits while providing risk triggers to assist in risk assessment exercises. It also requires developing data models and analytics to derive actionable insights for the internal audit function.
📋Job Type
full time
📊Experience Level
10+
💼Company Size
24617
📊Visa Sponsorship
No
💼Language
English
🏢Working Hours
40 hours
Apply Now →

You'll be redirected to
the company's application page