CISO

About the role

CISO – Internal Audit at Essar UK Services Private Limited leads the organization’s IT audit strategy, ensuring robust governance and security across all technology environments. The role drives risk‑based audit plans, conducts end‑to‑end audits, presents findings to senior management and the Audit Committee, and partners with IT and business leaders to remediate risks. Based in Mumbai, the position is on‑site with a focus on continuous improvement and automation of audit controls.

What you’ll do

• Develop and execute comprehensive IT audit strategy aligned with business objectives
• Create risk‑based audit plans for applications, infrastructure, cybersecurity, and digital initiatives
• Lead end‑to‑end IT audits, including planning, fieldwork, reporting, and follow‑up
• Assess IT general controls, application controls, database security, access management, and change management
• Present audit findings and recommendations to executive management and Audit Committee
• Partner with IT and business leaders to ensure timely remediation of identified issues
• Maintain relationships with external auditors and regulators
• Monitor regulatory developments and assess impact on IT controls

What you’ll bring

• 10-12 years IT audit experience
• Proficiency in COBIT, ISO 27001, NIST, ITIL frameworks
• Experience with SAP MM/FI/SD modules
• Cloud security expertise
• Audit tools proficiency
• CISM/CISSP/CISA certification
• Strong analytical and problem‑solving skills
• Experience with regulatory compliance

Skills