Manager - Internal Audit

Required Experience

5 - 7 Years

Skills

Internal audit

Job Description

Internal Audit

Location

Bangalore

About the Team

The Group Internal Audit (GIA) team conducts audits across business and functional domains to assess compliance with internal policies and regulatory requirements. The team identifies control gaps, monitors corrective actions, and strengthens internal controls to mitigate risks and enhance operational effectiveness. In addition, GIA drives management audits, field audits, and audit automation initiatives to improve audit coverage and efficiency.

About the Role

The Entity Internal Audit, Navi Limited, provides independent assurance across the entity’s businesses, including UPI, recharge and bill payments, digital gold, advertising, and other existing or future offerings. The role is responsible for developing and executing a risk-based internal audit plan covering products, technology, operations, compliance, risk management, customer protection, information security, and third-party arrangements, while maintaining independence from business operations.

Reporting

Functionally to the Audit Committee of the Board (ACB) and administratively to the Group Head of Audit.

Key Responsibilities

Audit Leadership and Governance

Own and execute the risk-based internal audit plan for Navi Limited, including annual risk assessment, audit prioritisation, management audits, scope definition, resource planning, and periodic reporting.

Provide independent assurance on the adequacy and effectiveness of governance, risk management, internal controls, and compliance processes across Navi Limited’s businesses.

Report significant audit findings, emerging risks, control gaps, overdue actions, and thematic issues to the Audit Committee and senior management as applicable.

Maintain independence and objectivity, ensuring the audit function does not assume management or operational responsibilities.

Drive audit automation, data analytics, automated testing, and technology-enabled audit techniques for transaction, technology, compliance, management, and operational reviews.

Product, Operations, and Technology Assurance

Review key product and customer journeys across Navi Limited’s offerings, including onboarding, transactions, service delivery, customer communication, refunds, complaints, and dispute handling, as applicable.

Assess controls over transaction processing, reconciliations, settlements, exception handling, operational resilience, and customer-impacting processes across relevant businesses.

Review technology and platform controls including integrations, access management, change management, incident management, availability, monitoring, data security, and business continuity.

Evaluate fraud, misuse, and operational risk controls, including transaction monitoring, exception reporting, escalation mechanisms, and preventive or detective controls relevant to each business.

Conduct management audits and thematic reviews to assess process effectiveness, governance discipline, decision controls, productivity, and accountability across key business and support functions.

Regulatory and Compliance Coverage

Assess adherence to applicable RBI, NPCI, data protection, cyber security, outsourcing, KYC, grievance redressal, customer protection, and other regulatory or contractual requirements relevant to Navi Limited’s businesses.

Review implementation of applicable regulatory circulars, partner or network requirements, audit observations, inspection findings, and internal policy requirements.

Coordinate with Compliance, Risk, Information Security, Legal, Finance, product, analytics and Operations teams to assess control design and operating effectiveness without compromising audit independence.

Support regulatory and external audit interactions by providing internal audit perspective, evidence, issue status, and remediation tracking where required.

Issue Management and Continuous Improvement

Ensure audit observations are clear, risk-rated, evidence-backed, and linked to practical management action plans with defined ownership and timelines.

Track remediation of audit issues, validate closure evidence, and escalate delays or repeated control failures.

Identify themes across audits and management reviews, and recommend improvements in control design, process discipline, monitoring, and accountability.

Must Haves

Required Experience

5+ years of experience in internal audit, risk assurance, technology audit, financial services audit, payments audit, or regulatory assurance.

Strong experience in payments, digital banking, fintech, payment aggregator, consumer internet, digital commerce, or regulated financial services environment.

Experience interacting with senior management, audit committees, regulators, external auditors, and cross-functional control owners.

Education and Certifications

CA, MBA, CPA, CIA, CISA, CISM, CISSP, FRM, or equivalent qualification preferred.

Strong understanding of internal audit standards, risk-based audit methodology, and financial services regulatory expectations.

Knowledge of RBI, NPCI, digital payments, cyber security, outsourcing, customer grievance handling, data protection, fraud risk management, and related regulatory expectations will be an advantage.

Key Skills and Competencies

Strong audit judgment with ability to distinguish material risks from process noise.

Deep understanding of payment systems, digital journeys, technology controls, operational risk, fraud risk, and regulatory compliance.

Ability to work with product, engineering, operations, compliance, risk, information security and other teams at Navi while preserving audit independence.

Excellent written and verbal communication, including concise audit reporting and senior stakeholder presentations.

High integrity, objectivity, professional scepticism, and ability to challenge constructively.

Comfort with data-led auditing, transaction analysis, exception tes