IT Audit Analyst

Role Summary

This opening is for an IT Audit Analyst within the Internal Audit function at Manappuram Finance. The position is based at the head office in Valapad, Thrissur, and is intended to support the review of technology systems, infrastructure, and business processes to confirm regulatory adherence and alignment with internal controls.

The role focuses on spotting risk exposures, assessing control design and operating effectiveness, and helping strengthen the organization’s audit and compliance framework. Compensation and grade will follow company policy and norms.

Key Responsibilities

• Review technology platforms, applications, and operational processes to verify that they meet internal policies and statutory expectations.
• Assess compliance with ISMS standards, IT governance requirements, and applicable regulatory guidelines.
• Identify control weaknesses, security gaps, and areas where systems may be vulnerable.
• Draft, refine, and close audit reports with clear observations and recommendations.
• Plan and perform audits using a risk-based approach.
• Study changes in processes and controls to understand their impact on risk.
• Document risk findings and suggest practical mitigation actions.
• Assist with external audit coordination and related information requests.
• Share audit progress and status updates with management as needed.
• Liaise with internal teams and outside stakeholders to support audit completion.
• Cover audit areas such as vendor risk management, IT governance, cyber security, business continuity and disaster recovery, IT operations, infrastructure, asset and license reviews, and RBI/NBFC IT compliance checks.

Candidate Profile

The organization is looking for applicants with a graduation or post-graduation background in IT or a related discipline. Diploma holders may also be considered if they bring relevant experience.

Ideal applicants should have 1 to 3 years of experience in IT audit, cyber security, or IT risk-related work. Familiarity with IT frameworks such as ISO 27001, COBIT, and NIST is important, along with a solid understanding of infrastructure, applications, and security principles.

Mandatory certifications mentioned for this role include CISA, CISSP, and ISO 27001 Lead Auditor.

Additional Requirements

• Willingness to travel whenever the job demands it.
• Capability to manage several audits at the same time.
• Proactive mindset toward identifying risks early and driving closure.
• Strong analytical ability and problem-solving approach.
• Good written and verbal communication for audit reporting.
• Attention to detail, critical thinking, teamwork, and professional conduct are expected.

Compensation and Employment Notes

This is a regular full-time position. The CTC will be as per company norms, and the grade or level will be assigned according to internal policy.

About the Company

Manappuram Finance Ltd. is a major NBFC in India with roots dating back to 1949 in Valapad, Thrissur District. What began as a small-scale pawn broking and money lending business has expanded significantly over the decades. Incorporated in 1992, the company now operates more than 5,200 branches across 28 states and union territories, manages assets under management of Rs 420.69 billion, and employs over 50,000 people.