Dhanlaxmi Bank - Information System Auditor Recruitment 2026

Dhanlaxmi Bank Ltd is recruiting an Information System (IS) Auditor for its Internal Audit Department, and online applications close on 13 November 2026. Engineering graduates in Computer Science, Information Technology, Electronics and Communication Engineering or an equivalent discipline can apply if they have 2 to 5 years of relevant experience. Both IS audit and IT infrastructure or cyber security operations backgrounds are accepted. The upper age limit is 35 years.

The official notification does not specify the application fee or the selection process.

Dhanlaxmi Bank Ltd is a bank headquartered at Thrissur, Kerala, where its registered office is also located. The notice describes almost a century of banking heritage and a network of 558 touch points across India, including 269 branches and 289 ATMs.

Age Limit

Maximum 35 years as on 30 September 2026.

Mandatory Educational Qualification

Bachelor's Degree in Engineering (Computer Science, Information Technology, Electronics and Communication Engineering) or equivalent discipline from a recognised university in India.

Mandatory Experience

Candidates need 2 to 5 years of relevant experience in Banks/Financial Institutions/audit/consultancy firms in any one or more of the areas below.

A. Information Systems Audit

• IS audit experience in banks, financial institutions or regulated entities.
• Audit exposure in Data Centre, Digital Payment Security, CBS, LOS, mobile banking, internet banking, customer acquisition and management systems, treasury, forex and other banking applications.
• Audits of Access Management Systems, including PAM, PIM, Active Directory and related identity management controls.
• Audits of Data Centre and SOC controls.
• Audits of UIDAI, SWIFT, NSDL, PCI-DSS and Digital Payment Security controls.
• Source code review/audit.
• BCP and DR audits.
• Audits of IT infrastructure, network, database and application security controls.
• Third-party/vendor IT risk assessments.

OR

B. IT Infrastructure / Cyber Security Operations

Experience in the implementation, administration, monitoring or maintenance of:

• Firewalls, routers, switches, load balancers and network security devices.
• SIEM, DAM, network monitoring tools and security monitoring solutions.
• Antivirus, EDR, endpoint security and data protection solutions.
• Patch management, vulnerability management and configuration baseline controls.
• Server and network hardening activities.
• Privileged Identity Management (PIM) and Privileged Access Management (PAM) solutions.

Preferred or Added Advantage

• ISACA, Certified Information Systems Auditor (CISA) certification.
• Experience in Information System audit.
• Experience in Vulnerability Assessment and Penetration Testing (VAPT).
• ISO/IEC 27001 LA, Certified Ethical Hacker (CEH).

See the official notification (PDF) ↗ for the discipline-specific eligibility of this post.

• Identify, assess and report risks relating to IT infrastructure, applications, databases and network environments.
• Assess compliance with IT Governance, Risk and Compliance (IT GRC) requirements, IT General Controls (ITGC) and application controls.
• Evaluate compliance with the Bank's Cyber Security Policy, Information Security Policy and regulatory requirements.
• Assess the adequacy and effectiveness of controls that prevent, detect and respond to cyber security threats.
• Conduct Information Systems audits of digital payment channels, Data Centre, Security Operations Centre (SOC), Core Banking Solution (CBS), Loan Origination System (LOS) and other banking applications.
• Assess compliance with regulatory and industry requirements applicable to the Bank's IT environment, including RBI guidelines, PCI-DSS, SWIFT and other relevant standards.
• Prepare audit reports, document audit observations, validate corrective action plans and track closure of audit findings.

The IS Auditor also independently conducts audits of these IT GRC controls:

• Patch and vulnerability management.
• Change management.
• User access management and privileged access management.
• Backup management.
• Business Continuity Planning (BCP) and Disaster Recovery (DR) measures.
• Data security and data protection controls.
• Configuration management and security hardening.

1. Submit the application online, as this is the mode of application the notice gives.
2. Attach your latest CV along with the application.