Senior Manager -Internal Audit; Information Security and System Audit

Position: Senior Manager -Internal Audit (Information Security and System Audit)
Location: Bengaluru

About the role

The individual will be responsible for conducting  application and product-level security audits  across digital banking platforms. The role focuses on evaluating end-to-end app workflows, user journeys, APIs, backend services, and integrations to ensure robust security, compliance, and risk governance. The individual will work closely with product, engineering, and security teams to strengthen the security posture of all customer-facing apps and digital products.

What you will do

Conduct  security audits of mobile & web applications , including onboarding flows, payments, authentication journeys, customer dashboards, and backend microservices.
Evaluate app compliance with  RBI cybersecurity guidelines , CSITE requirements, CERT-IN directives, and secure digital product practices.
Assess  app-specific ITGCs and functional controls , including access management, configuration integrity, release/change processes, and secure SDLC adherence.
Review  app architecture, APIs, SDKs, third-party integrations , and product dependencies for security gaps.
Identify risks across  product workflows , such as KYC, login & session controls, transaction authorization, data flows, and fraud-prone journeys.
Perform  control testing and app security assessments , including review of logs, API behaviour, encryption practices, and sensitive data handling.
Evaluate  Dev Sec Ops  practices , CI/CD release pipelines, and secure coding guidelines followed by engineering teams.
Document findings and provide actionable recommendations to product & tech teams for  enhancing app security without impacting user experience .
Track closure of product-specific vulnerabilities and ensure timely remediation.
Partner with  product managers, developers, QA teams, and security engineers  to strengthen digital product governance and readiness for regulatory audits.
Support app-focused cybersecurity awareness and guide product teams during regulatory inspections.

What you will need

Strong understanding of  mobile/web application security , secure SDLC, OWASP MASVS/OWASP Top 10, RBI digital banking security guidelines, and CERT-IN regulations.
Experience in reviewing  product-level ITGCs , including app access controls, change management, version/release governance, and backup & restore checks.
Ability to analyze  product journeys , detect process-level security risks, and ensure regulatory adherence for digital banking platforms.
Knowledge of  API security, cloud-hosted applications, microservices, app-layer encryption, network basics , and vulnerability management workflows.
Strong skills in  audit documentation, writing product-focused security observations, and coordinating with product & engineering teams .

Experience & Qualifications

BE/BTech or equivalent in Information Security, IT, or Cybersecurity.
CISA (Mandatory).
5+ years in Information Security Audits, with at least 2 years in  banking or fintech , specifically auditing  digital products, mobile apps, or customer-facing banking journeys .

Life at slice:

Life so good, you’d think we’re kidding:

Competitive salaries. Period.
An extensive medical insurance that looks out for our employees & their dependants. We’ll love you and take care of you, our promise.
Flexible working hours. Just don’t call us at 3AM, we like our sleep schedule.
Tailored vacation & leave policies so that you enjoy every important moment in your life.
A reward system that celebrates hard work and milestones throughout the year. Expect a gift coming your way anytime you kill it here.
Learning and upskilling opportunities. Seriously, not kidding.
Good food, games, and a cool office to make you feel like home. An environment so good, you’ll forget the term “colleagues can’t be your friends”.
We believe in equality. Period.

At slice, we are committed to building a diverse and talented workforce. We never discriminate on the basis of race, sex, religion, colour, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, medical condition, disability, or any other class or characteristic protected by the applicable law.

We consider all qualified job-seekers with criminal histories in…