Information Technology Internal Auditor

Mizuho Global Services Pvt Ltd (MGS) is a subsidiary company of Mizuho Bank, Ltd, which is one of the largest banks or so called Mega Banks of Japan. MGS was established in the year 2020 as part of Mizuhos long-term strategy of creating a captive global processing center for remotely handling banking and IT related operations of Mizuho Banks domestic and overseas offices and Mizuhos group companies across the globe.
At Mizuho we are committed to a culture that is driven by ethical values and supports diversity in all its forms for its talent pool. Direction of MGSs development is paved by its three key pillars, which are Mutual Respect, Discipline and Transparency, which are set as the baseline of every process and operation carried out ts in it for you?
Immense exposure and learning
Excellent career growth
Company of highly passionate leaders and mentors
Ability to build things from scratch
Know more about MGS:

- Job Role:

Senior Internal Auditor IT Audit
Role Summary
The Senior Internal Auditor IT Audit is a key role within the MGS Internal Audit function, responsible for providing independent assurance over the organization's technology risk landscape. This individual will lead and execute complex IT audits covering IT governance, infrastructure, cybersecurity, data security, applications, third party vendor management and IT service delivery within MGS. The role requires deep technical expertise and the ability to translate complex technical risks into business impact.
The Senior IT Auditor will manage audit projects, engage with senior IT and business leadership, and be a key contributor to the Audit department's strategic objectives. The role also contributes to continuous audit monitoring, risk assessment, and audit planning and strengthens the organizations technology risk and control framework.
IT Audit & Assurance   :
Minimum 10 years of dedicated experience in IT internal audit, risk management, or information security assurance, with at least 2 years of leading IT Audit engagements.
BFSI, GCCs, Shared Services   :
Demonstrable experience auditing the technology environment of a Global Capability Center (GCC) or shared services environment of large banking or financial services entities, including infrastructure, service delivery, applications and data security.
Technical Audit Domains   :
Extensive hands-on experience leading audits of IT General Controls (ITGCs), cybersecurity, cloud environments (IaaS, PaaS, SaaS), network security, application controls, third party risks (TPRM) and IT service management (ITSM).
Third-party Risk Assurance   :
Experience auditing the full lifecycle of third-party risk management (TPRM), including vendor due diligence, contract reviews (SLAs, right-to-audit), ongoing monitoring, and offboarding, with a focus on Cloud Service Providers (CSPs).
Technology Resilience & Business Continuity:
Proven experience auditing technical disaster recovery (DR) and business continuity (BCP) programs. Expertise in validating RTO/RPO capabilities, DR testing, and BIA alignment.
Project & Team Leadership   :
Proven ability to lead complex IT audit engagements from planning to reporting, including managing and reviewing the work of other auditors
Integrated Audits with Data-focus   :
Experience working with Business auditors for end-to-end process and control assurance and partnering with data teams to define audit use cases, perform analytics-based testing.
Mandatory Qualifications   :
Bachelors or Masters degree in Information Technology, Computer Science, or a related field
Preferred   : CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control)
Certifications   : CISA (Certified Information Systems Auditor) OR Cloud-specific certifications (e.g., AWS Certified Security - Specialty, Microsoft Azure Security Engineer), CGEIT (Certified in the Governance of Enterprise IT)
Knowledge of Governance Standards -
- COBIT Framework   :
Deep understanding and practical application of the COBIT (Control Objectives for Information and Related Technologies) framework for IT governance and…