Internal Audit

Location: Vasanthanagar

Internal Audit

Location:

Bangalore

About the Team
The Group Internal Audit (GIA) team conducts audits across business and functional domains to assess compliance with internal policies and regulatory requirements. The team identifies control gaps, monitors corrective actions, and strengthens internal controls to mitigate risks and enhance operational effectiveness. In addition, GIA drives management audits, field audits, and audit automation initiatives to improve audit coverage and efficiency.

About the Role
The Entity Internal Audit, Navi Limited, provides independent assurance across the entity’s businesses, including UPI, recharge and bill payments, digital gold, advertising, and other existing or future offerings. The role is responsible for developing and executing a risk-based internal audit plan covering products, technology, operations, compliance, risk management, customer protection, information security, and third-party arrangements, while maintaining independence from business operations.

Reporting:  Functionally to the Audit Committee of the Board (ACB) and administratively to the Group Head of Audit.

Key Responsibilities

Audit Leadership and Governance
Own and execute the risk-based internal audit plan for Navi Limited, including annual risk assessment, audit prioritisation, management audits, scope definition, resource planning, and periodic reporting.
Provide independent assurance on the adequacy and effectiveness of governance, risk management, internal controls, and compliance processes across Navi Limited’s businesses.
Report significant audit findings, emerging risks, control gaps, overdue actions, and thematic issues to the Audit Committee and senior management as applicable.
Maintain independence and objectivity, ensuring the audit function does not assume management or operational responsibilities.
Drive audit automation, data analytics, automated testing, and technology-enabled audit techniques for transaction, technology, compliance, management, and operational reviews.

Product, Operations, and Technology Assurance
Review key product and customer journeys across Navi Limited’s offerings, including onboarding, transactions, service delivery, customer communication, refunds, complaints, and dispute handling, as applicable.
Assess controls over transaction processing, reconciliations, settlements, exception handling, operational resilience, and customer-impacting processes across relevant businesses.
Review technology and platform controls including integrations, access management, change management, incident management, availability, monitoring, data security, and business continuity.
Evaluate fraud, misuse, and operational risk controls, including transaction monitoring, exception reporting, escalation mechanisms, and preventive or detective controls relevant to each business.
Conduct management audits and thematic reviews to assess process effectiveness, governance discipline, decision controls, productivity, and accountability across key business and support functions.

Regulatory and Compliance Coverage
Assess adherence to applicable RBI, NPCI, data protection, cyber security, outsourcing, KYC, grievance redressal, customer protection, and other regulatory or contractual requirements relevant to Navi Limited’s businesses.
Review implementation of applicable regulatory circulars, partner or network requirements, audit observations, inspection findings, and internal policy requirements.
Coordinate with Compliance, Risk, Information Security, Legal, Finance, product, analytics and Operations teams to assess control design and operating effectiveness without compromising audit independence.
Support regulatory and external audit interactions by providing internal audit perspective,…