Dhanlaxmi Bank IS Auditor Recruitment 2026: Eligibility, Experience Tracks, CISA Edge & How to Apply
Quick Highlights at a Glance
Table of Contents
- Introduction: What This Recruitment Is
- About Dhanlaxmi Bank and Its IS Audit Function
- Important Dates and Deadline
- Vacancy Details: What the Notice Discloses
- Educational Qualification and Certifications
- Experience Requirement: Track A vs Track B Decoded
- Age Limit and Date-of-Birth Cut-Off
- Salary and Grade
- Application Fee
- Job Role: The IT GRC Control Areas You Will Audit
- Regulatory Frameworks an IS Auditor Must Know
- Selection Process
- Self-Assessment: Does Your Profile Fit?
- How to Apply Online
- Interview Preparation by Control Domain
- General Instructions and Common Mistakes
- Frequently Asked Questions
- Important Links
1. Introduction: What Is the Dhanlaxmi Bank IS Auditor Recruitment 2026?
Dhanlaxmi Bank Ltd., a private sector scheduled commercial bank headquartered in Thrissur, Kerala, is hiring a qualified Information System (IS) Auditor for its Internal Audit Department. Candidates need a B.E./B.Tech in Computer Science, IT, Electronics & Communication or an equivalent discipline, 2 to 5 years of relevant experience, and must be 35 years or younger as on 30 September 2026. Applications are accepted online, with a current CV, until 13 November 2026.
This is a lateral, experienced-professional hire, not an entry-level bank exam. There is no written test syllabus, no category-wise reservation table and no fixed pay scale in the notice. What decides your chances is how closely your work history matches the control areas the bank wants audited: Core Banking Solution (CBS), Loan Origination System (LOS), digital payment channels, the Data Centre, the Security Operations Centre (SOC), and compliance with RBI guidelines, PCI-DSS and SWIFT standards.
The most important detail many summaries miss is that the notice accepts two separate experience routes. One is hands-on IS audit work. The other is IT infrastructure or cyber security operations, such as running firewalls, SIEM, EDR or PAM tools. A SOC engineer or network security administrator can therefore apply even without a formal audit title, although IS audit experience is given preference. Section 6 below explains both tracks in detail.
Editorial Note: This guide is prepared by the Vacancy Vedika editorial team from the official Dhanlaxmi Bank notification and the bank's publicly available documents on its IS audit function. Wherever the notice is silent (vacancy count, fee, pay figures, selection stages), we say so clearly instead of guessing. Always confirm final details on the bank's official careers page before applying.
2. About Dhanlaxmi Bank and Its IS Audit Function
Dhanlaxmi Bank Ltd. was established in 1927 in Thrissur and is one of the older private sector banks in Kerala. According to the recruitment notice, the bank operates 558 touch points across India, made up of 269 branches and 289 ATMs, with a stated focus on personalised customer relationships.
Organization Profile
- Full Name: Dhanlaxmi Bank Ltd.
- Type: Private sector scheduled commercial bank
- Established: 1927
- Registered / Corporate Office: Thrissur, Kerala
- Network (as per notice): 558 touch points, 269 branches, 289 ATMs
- Hiring Department: Internal Audit Department (IS Audit)
- Official Website: dhan.bank.in
How the IS Audit Function Works at Dhanlaxmi Bank
The bank's own public procurement documents give a useful picture of the team you would join. In a Request for Proposal for conducting Information System Audit, dated 30 July 2026, the bank describes its IS audit function as responsible for checking that the bank's information assets maintain confidentiality, integrity and availability. It also assesses compliance with the bank's Information Security Policy, IT Policy and regulatory norms. The Internal Audit Department sits at the Corporate Office in Punkunnam, Thrissur, and reports internal control weaknesses to top management and the Audit Committee of the Board.
The same RFP shows that the bank also engages external audit firms for some IS audit assignments. In a related RFP for IT policy assessment, the bank asked bidders to list staff with CISA registration numbers and at least 2 years of IS audit experience in scheduled commercial banks. For an in-house IS Auditor, this suggests two practical things:
- Part of the role is likely to involve coordinating and reviewing work done by external auditors, not only doing audits yourself.
- The bank clearly treats CISA as the benchmark credential for IS audit, which matches the preference stated in this notice.
3. Important Dates and Deadline
The notice prints only two dates: the age cut-off and the closing date. No opening date is mentioned, which means applications are already being accepted through the careers portal.
| Event | Date |
|---|---|
| Application Start Date | Not specified (applications open) |
| Crucial Date for Age Calculation | 30 September 2026 |
| Last Date for Online Application | 13 November 2026 |
| Shortlisting / Interview | To be communicated by the bank |
Deadline Alert: The window closes on 13 November 2026. Private bank career portals can slow down on the final day, and you need a polished CV ready to upload. Aim to submit at least two to three days early.
4. Vacancy Details: What the Notice Discloses
The Dhanlaxmi Bank IS Auditor notice does not state the number of vacancies. It describes the recruitment of "qualified professionals" for a single role in one department. Some job portals list it as "1 post", but that number is not printed in the official notice.
| Post | Department | Vacancies | Category-Wise Break-Up | Posting |
|---|---|---|---|---|
| Information System Auditor | Internal Audit Department | Not disclosed | Not applicable (private bank) | Not specified; IAD is at Corporate Office, Thrissur |
As a private sector bank, Dhanlaxmi Bank is not bound by the UR/OBC/SC/ST/EWS reservation rules that apply to public sector banks, and the notice does not mention any reservation. The place of posting is also not printed. Since the Internal Audit Department works out of the Corporate Office at Thrissur, candidates should be prepared for a Thrissur-based role with possible travel to the Data Centre, disaster recovery site or branches during audits. Confirm this at the interview stage.
5. Educational Qualification and Certifications
The mandatory qualification is a Bachelor's degree in Engineering in Computer Science, Information Technology, Electronics and Communication Engineering, or an equivalent discipline, from a recognised university in India. Certifications are not compulsory, but CISA is named as a preference.
Mandatory Degree
- B.E./B.Tech in Computer Science
- B.E./B.Tech in Information Technology
- B.E./B.Tech in Electronics & Communication Engineering
- Or an equivalent engineering discipline
- From a recognised university in India
Preferred Certification
- ISACA Certified Information Systems Auditor (CISA)
- Gives preference in shortlisting
Added Advantage
- ISO/IEC 27001 Lead Auditor (LA)
- Certified Ethical Hacker (CEH)
- Experience in VAPT (Vulnerability Assessment and Penetration Testing)
What Does "Equivalent Discipline" Cover?
The notice does not list which other branches count as equivalent. Based on how Indian banks usually read this phrase for IT roles, B.E./B.Tech degrees in Computer Engineering, Information Science, Electronics & Telecommunication, or Electrical & Electronics with a strong IT focus are generally the closest matches. MCA, B.Sc (IT) or BCA holders are not explicitly covered, because the notice asks for a bachelor's degree in engineering. If your degree falls in a grey area, apply only after confirming with the bank, as the final decision on equivalence rests with Dhanlaxmi Bank.
Pro Tip: If you have passed the CISA exam but your certification is still pending approval (for example, while you complete the experience requirement), mention "CISA exam passed, certification in process" with the exam month on your CV. It shows the knowledge the bank is looking for without overstating your status.
6. Experience Requirement: Track A vs Track B Decoded
Candidates need 2 to 5 years of relevant experience in banks, financial institutions, audit firms or consultancy firms. That experience can come from either of two tracks. The notice joins them with "OR", so you do not need both. Preference is given to candidates with IS audit experience, which means Track A profiles are likely to rank higher at shortlisting.
| Aspect | Track A: Information Systems Audit | Track B: IT Infrastructure / Cyber Security Operations |
|---|---|---|
| Who fits | IS auditors, IT audit associates at audit or consulting firms, ITGC testers, internal IT audit staff at banks or NBFCs | Network and security administrators, SOC analysts, infrastructure engineers, IAM/PAM engineers in banks or financial institutions |
| Systems named | Data Centre, digital payment security, CBS, LOS, mobile and internet banking, customer acquisition systems, treasury, forex | Firewalls, routers, switches, load balancers, SIEM, DAM, network monitoring, antivirus, EDR, endpoint and data protection tools |
| Control areas named | PAM, PIM, Active Directory and identity controls; DC and SOC controls; UIDAI, SWIFT, NSDL, PCI-DSS; source code review; BCP and DR; vendor IT risk | Patch and vulnerability management, configuration baselines, server and network hardening, PIM and PAM solutions |
| Your edge | You already know audit methodology, sampling, evidence and report writing | You know how controls actually work and fail from the inside, which helps you spot weak evidence |
| Your gap to close | Hands-on depth on specific security tools | Audit methodology: planning, sampling, writing observations and tracking closure |
| Shortlisting preference | Higher (stated in notice) | Eligible, but needs a strong CV that shows control and compliance exposure |
How Track B Candidates Can Present Their Experience
A SOC or infrastructure engineer applying for an audit role should describe their work in terms of controls and evidence, not only operations. For example, instead of "managed Palo Alto firewalls", write "maintained firewall rule base and conducted quarterly rule reviews to remove unused and over-permissive rules; supported RBI and internal audit evidence requests". This shows the audit committee that you already understand what an auditor asks for.
Experience Above 5 Years
The notice states "2 to 5 years". It does not say whether candidates with more than 5 years are excluded or simply outside the target band. Since the age limit of 35 also applies, most candidates with more than 5 years of experience will still fall within the age cut-off. If you have 6 or 7 years, the safest approach is to apply and highlight the 2–5 most relevant years clearly. The bank may still decide that the profile is above the intended grade.
Warning: Experience must be in banks, financial institutions, audit firms or consultancy firms. General corporate IT support, or software development with no security or audit element, is unlikely to be treated as relevant experience.
7. Age Limit and Date-of-Birth Cut-Off
The maximum age is 35 years as on 30 September 2026. In practical terms, candidates born on or after 1 October 1990 meet the age limit. Someone born on 30 September 1990 turns 36 on the cut-off date and would be over the limit. No minimum age is stated, and the notice does not mention any age relaxation for any category.
| Date of Birth | Age on 30 September 2026 | Status |
|---|---|---|
| Before 1 October 1990 (e.g. 15 August 1990) | 36 years or more | Not eligible |
| 30 September 1990 | Exactly 36 years | Not eligible |
| 1 October 1990 | 35 years, 11 months, 29 days | Eligible (oldest permitted) |
| 1 October 1990 to 30 September 2004 | 22 to 35 years | Eligible on age (experience still applies) |
Note: Because the role needs a 4-year engineering degree plus at least 2 years of experience, almost every eligible candidate will be 24 or older. The real filter is the upper limit of 35.
8. Salary and Grade
The notice does not publish a pay scale. Salary and grade will be fixed based on the candidate's experience, expertise and exposure. This is a negotiated offer, typical of private bank lateral hiring, rather than a fixed pay matrix like those in public sector banks.
Pay Structure as per Notice
What Will Shape Your Offer
- Type of experience: IS audit experience in a scheduled commercial bank is preferred over Track B operations experience.
- Certifications: CISA is preferred; ISO 27001 LA and CEH are an added advantage.
- Banking application exposure: Direct audit or operations experience with CBS, LOS, SWIFT, UPI or card systems matches the core responsibilities.
- Current compensation: As with most lateral hires, your current CTC will be a reference point during negotiation.
Note: Because the grade is not fixed in advance, ask at the offer stage which officer scale or grade you are being placed in, whether the role is permanent or contractual, and what the probation period is. These details affect benefits and future promotion.
9. Application Fee
The IS Auditor notice does not mention any application fee. Earlier Dhanlaxmi Bank recruitments with a written exam, such as the Junior Officer and Assistant Manager drive in 2025, charged a fee. This lateral hiring notice asks only for an online application with a CV.
| Item | Status as per Notice |
|---|---|
| Application Fee | Not mentioned |
| Payment Mode | Not applicable |
| Documents to Attach | Latest CV |
Fraud Alert: If anyone asks you to pay a "processing fee", "registration charge" or "security deposit" by phone, WhatsApp or email for this job, treat it as a scam. Apply only through the bank's own careers page on the official dhan.bank.in domain.
10. Job Role: The IT GRC Control Areas You Will Audit
The Dhanlaxmi Bank IS Auditor will identify and report risks in IT infrastructure, applications, databases and networks, and test compliance with IT Governance, Risk and Compliance (IT GRC) requirements, IT General Controls (ITGC) and application controls. The notice lists seven IT GRC control areas that the auditor must be able to audit independently. The table below explains what each area means in day-to-day audit work.
| Control Area | What the Auditor Tests | Typical Evidence Reviewed |
|---|---|---|
| Patch and Vulnerability Management | Whether critical patches are applied within policy timelines and vulnerabilities are tracked to closure | Patch compliance reports, VA scan results, exception approvals, closure trackers |
| Change Management | Whether every production change was requested, approved, tested and reviewed | Change tickets, CAB minutes, UAT sign-offs, emergency change logs |
| User Access and Privileged Access Management | Whether access is role-based, reviewed periodically, and removed on exit; whether admin access is controlled through PAM | User access review records, joiner-mover-leaver reports, PAM session logs, Active Directory extracts |
| Backup Management | Whether backups run as scheduled, are stored securely and can actually be restored | Backup job logs, restoration test records, offsite or vault storage registers |
| BCP and Disaster Recovery | Whether critical systems such as CBS can be recovered within approved RTO and RPO targets | BCP document, DR drill reports, switchover results, gaps and action plans |
| Data Security and Data Protection | Whether customer and bank data is classified, encrypted and protected from leakage | DLP reports, encryption settings, data classification policy, DAM alerts |
| Configuration Management and Hardening | Whether servers, databases and network devices follow approved secure baselines | Hardening checklists, configuration compliance scans, baseline deviation reports |
Systems in Scope
Beyond the control areas, the notice names the banking systems the IS Auditor will audit: digital payment channels, the Data Centre, the Security Operations Centre (SOC), the Core Banking Solution (CBS), the Loan Origination System (LOS) and other banking applications. The role also covers evaluating compliance with the bank's Cyber Security Policy and Information Security Policy, and checking whether controls to prevent, detect and respond to cyber threats are adequate.
The Audit Lifecycle
Assess risks in the infrastructure, application, database or network area being audited and decide where to focus testing.
Test ITGC and application controls against bank policy and regulatory requirements, collecting evidence from system owners.
Prepare the audit report and document each observation with its risk rating and recommended fix.
Review the action plans proposed by the departments being audited and check that they actually address the root cause.
Follow up on open findings until they are closed, and verify the fix before marking an item complete.
11. Regulatory Frameworks an IS Auditor Must Know
The notice requires the IS Auditor to assess compliance with RBI guidelines, PCI-DSS, SWIFT and other relevant standards, and lists audit experience in UIDAI, SWIFT, NSDL and PCI-DSS controls under Track A. The table below shows what each framework covers in an Indian bank, so you can judge where your knowledge is strong and where to revise before the interview.
| Framework | Issued By | What It Covers in a Bank | Why the IS Auditor Cares |
|---|---|---|---|
| RBI IT Governance, Risk, Controls and Assurance Master Direction | Reserve Bank of India | IT governance structure, IT risk management, IS audit function, BCP/DR, vendor risk | Sets expectations for how the IS audit function itself should operate in regulated entities |
| RBI Cyber Security Framework for Banks | Reserve Bank of India | Cyber security policy, SOC, incident reporting, baseline controls | Basis for assessing cyber controls and the SOC |
| RBI Digital Payment Security Controls | Reserve Bank of India | Security of internet banking, mobile banking and card payments | Directly linked to the digital payment channel audits in the notice |
| PCI-DSS | PCI Security Standards Council | Protection of payment card data across systems that store, process or transmit it | Card and ATM environments must comply; auditors check segmentation, encryption and logging |
| SWIFT Customer Security Programme (CSP) | SWIFT | Security of the bank's SWIFT infrastructure through the Customer Security Controls Framework | Banks submit an annual attestation; independent assessment is required, which internal audit can support |
| UIDAI (Aadhaar) Security Requirements | Unique Identification Authority of India | Secure handling of Aadhaar authentication and e-KYC as an AUA/KUA | Banks using Aadhaar e-KYC must meet UIDAI audit requirements |
| NSDL Controls | NSDL | Depository participant and related operations | Relevant where the bank offers demat or PAN-linked services |
| ISO/IEC 27001 | ISO / IEC | Information Security Management System (ISMS) | Common baseline for policies and controls; ISO 27001 LA is an added advantage |
Pro Tip: Before the interview, read the RBI Master Direction on IT Governance, Risk, Controls and Assurance Practices, focusing on the chapters about the IS audit function and BCP/DR. Interviewers in bank audit departments often ask how the IS audit function should be structured and how often specific audits must be done.
12. Selection Process
The Dhanlaxmi Bank IS Auditor notice does not describe the selection process. It mentions no written test or exam pattern. For lateral IT audit hiring in private banks, the usual approach is CV-based shortlisting followed by one or more interviews. For example, South Indian Bank's IS Audit recruitment in 2026 used shortlisting and preliminary and/or personal interviews. The stages below show the likely sequence and should not be read as confirmed by Dhanlaxmi Bank.
Applications are checked against the degree, age and experience requirements. Candidates with IS audit experience and CISA are likely to be shortlisted first.
Likely to test ITGC concepts, the seven control areas, banking systems such as CBS and SWIFT, and RBI regulations.
Covers compensation, notice period, grade placement and willingness to relocate to Thrissur.
Degree, experience certificates, relieving letters and certification proofs are verified before the offer letter is issued.
13. Self-Assessment: Does Your Profile Fit?
Use this checklist before you apply. If you can answer "yes" to all four mandatory checks and to at least four of the strength signals, your profile is a reasonable match for the Dhanlaxmi Bank IS Auditor role.
| Check | Type | What to Confirm |
|---|---|---|
| B.E./B.Tech in CS, IT, ECE or equivalent | Mandatory | Degree from a recognised Indian university |
| Born on or after 1 October 1990 | Mandatory | 35 or younger on 30 September 2026 |
| 2 to 5 years of relevant experience | Mandatory | In a bank, financial institution, audit firm or consultancy |
| Experience fits Track A or Track B | Mandatory | IS audit, or IT infrastructure / cyber security operations |
| CISA certified | Strength | Stated preference in the notice |
| Audited or operated CBS, LOS or payment systems | Strength | Directly named in the responsibilities |
| Worked on PCI-DSS, SWIFT CSP or UIDAI compliance | Strength | Named regulatory areas |
| Hands-on with PAM/PIM or Active Directory controls | Strength | Named in both tracks |
| Participated in DR drills or BCP audits | Strength | One of the seven control areas |
| VAPT experience, ISO 27001 LA or CEH | Strength | Listed as added advantage |
| Written audit reports or tracked findings to closure | Strength | Core part of the job |
Map Your CV to the Notice
Shortlisting panels compare CVs against the notice line by line. Make sure your CV uses the same terms the bank uses: ITGC, IT GRC, PAM, PIM, SIEM, DAM, EDR, BCP/DR, CBS, LOS, PCI-DSS, SWIFT, UIDAI. For each role you have held, include one or two lines that name the system, the control and the outcome, for example the number of findings raised, the systems audited, or the compliance assessment you supported.
14. How to Apply Online
Applications must be submitted online through the Dhanlaxmi Bank careers page, with your latest CV attached, by 13 November 2026. The bank's recent notices point candidates to dhan.bank.in/careers. Older links on the previous dhanbank.com domain that appear on some job sites may be outdated.
Update your CV with your degree, certifications, exact employment dates and a short list of systems and controls you have audited or managed. Save it as a PDF.
Go to the official careers page on the dhan.bank.in domain and find the notice titled Recruitment of qualified professional as Information System Auditor for Internal Audit Department.
Download the official notice and check the age cut-off, degree and experience requirements against your own details one final time.
Enter your personal details, qualifications and work experience carefully. Make sure the dates match your CV and experience letters.
Attach the latest CV as required by the notice. Check that the file opens correctly before uploading.
Submit before 13 November 2026 and save a screenshot or confirmation of the submitted application for your records.
Documents to Keep Ready for Later Stages
| Document | Why It Is Needed |
|---|---|
| Degree certificate and mark sheets | Proof of B.E./B.Tech in the required discipline |
| Proof of date of birth | Verification of the 35-year age limit |
| Experience and relieving letters | Proof of 2–5 years of relevant experience |
| CISA / ISO 27001 LA / CEH certificates | Proof of preferred and added-advantage credentials |
| Recent salary slips | Usually requested for compensation discussions |
| Government photo ID | Identity verification at interview |
15. Interview Preparation by Control Domain
Because the notice lists specific control areas and systems, the technical interview is likely to follow the same areas. Preparing one clear example from your own work for each domain is more useful than memorising definitions.
| Domain | Topics to Prepare | Example Question Type |
|---|---|---|
| ITGC Basics | Access, change, operations and backup controls; design vs operating effectiveness | How would you test whether user access reviews are actually effective? |
| Privileged Access | PAM vs PIM, shared admin accounts, session recording, emergency access | What evidence would you ask for to confirm that privileged sessions are monitored? |
| CBS and LOS | Application controls, parameter changes, maker-checker, interface controls | How would you audit a change to interest rate parameters in CBS? |
| Digital Payments | Mobile and internet banking security, UPI, transaction limits, fraud monitoring | Which controls would you check first in a mobile banking audit? |
| Data Centre and SOC | Physical security, environmental controls, SIEM use cases, incident response | How do you judge whether a SOC is detecting the right events? |
| BCP and DR | RTO and RPO, DR drill scope, switchover and switchback | What would make you rate a DR drill as unsatisfactory? |
| Vulnerability and Patch | Severity-based timelines, exception handling, VAPT findings closure | How do you treat a critical vulnerability that cannot be patched? |
| Regulations | RBI IT governance and cyber security directions, PCI-DSS, SWIFT CSP | What does the SWIFT Customer Security Programme require of a bank each year? |
| Reporting | Writing observations, risk rating, root cause, closure validation | Walk us through how you wrote and followed up on a high-risk finding. |
Pro Tip: Structure your examples as condition, criteria, cause, effect and recommendation. This is the standard way audit observations are written, and using it in the interview shows you already think like an auditor, which is especially helpful for Track B candidates.
16. General Instructions and Common Mistakes
- Only online applications with a CV attached will be considered. The notice mentions no offline or email route.
- Eligibility is checked against the 30 September 2026 cut-off for age. Make sure your date of birth is entered correctly.
- Experience must be relevant and from banks, financial institutions, audit firms or consultancy firms.
- The bank decides salary and grade based on experience, expertise and exposure. There is no fixed scale.
- Keep your email and phone number active. Shortlisted candidates are usually contacted directly.
- Apply only through the official dhan.bank.in domain and never pay anyone to "process" your application.
Common Mistakes That Hurt Shortlisting
| Mistake | Consequence | Fix |
|---|---|---|
| Generic IT CV with no audit or control language | Panel cannot see a link to the IS audit role | Rewrite bullets around controls, evidence and compliance |
| Listing tools without context | Looks like a keyword list | Name the tool, what you did with it and the result |
| Employment dates that do not match letters | Problems at document verification | Use exact month and year as in your experience letters |
| Claiming CISA before certification is granted | Credibility loss or offer withdrawal | State "exam passed, certification in process" accurately |
| Applying on the last day | Risk of portal issues and missed deadline | Submit two to three days before 13 November 2026 |
17. Frequently Asked Questions
Below are the most commonly asked questions about this recruitment. If your question is not answered here, please refer to the official notification on the Dhanlaxmi Bank careers page.
18. Important Links
| Description | Link |
|---|---|
| Apply Online (Careers Page) | Apply Here |
| Official Notification | View on Careers Page |
| Dhanlaxmi Bank Official Website | dhan.bank.in |
| IS Auditor Eligibility Guide | Read Guide |
| IS Auditor How to Apply Guide | Read Guide |
| IS Auditor Selection Process | Read Guide |
Frequently Asked Questions (FAQs)
The last date to submit the online application with your CV is 13 November 2026. No opening date is printed in the notice, so applications are already being accepted on the bank's careers page.
Yes. The notice accepts experience in either IS audit (Track A) or IT infrastructure and cyber security operations (Track B), such as firewalls, SIEM, DAM, EDR, patch management, hardening and PAM/PIM. Candidates with IS audit experience get preference, so Track B applicants should describe their work in terms of controls and audit evidence.
No. CISA is not mandatory, but candidates holding the ISACA CISA certification are given preference. ISO/IEC 27001 Lead Auditor, CEH and VAPT experience are listed as an added advantage.
The maximum age is 35 years as on 30 September 2026. In practice, candidates born on or after 1 October 1990 meet the age limit. The notice does not mention any category-wise age relaxation.
A B.E./B.Tech in Computer Science, Information Technology, Electronics & Communication Engineering, or an equivalent engineering discipline from a recognised university in India. MCA, BCA and B.Sc (IT) are not explicitly covered, so confirm with the bank if your degree is in a grey area.
Candidates need 2 to 5 years of relevant experience in banks, financial institutions, audit firms or consultancy firms, in IS audit or IT infrastructure/cyber security operations.
The notice does not publish a pay scale. Salary and grade will be decided based on the candidate's experience, expertise and exposure. Ask about the grade, probation and whether the role is permanent at the offer stage.
The notice does not mention any application fee. Applicants only need to apply online and attach their latest CV. Do not pay anyone who asks for a processing or registration fee for this job.
The official notice does not state the number of vacancies. Figures such as "1 post" shown on some job portals are not printed in the Dhanlaxmi Bank notice.
The notice does not describe the selection process and mentions no written exam. For similar private bank IT audit roles, selection usually involves CV shortlisting followed by a technical interview and an HR discussion, but this has not been confirmed by Dhanlaxmi Bank.
Apply through the official careers page at dhan.bank.in/careers. The bank's recent notices use the dhan.bank.in domain, so older dhanbank.com links on some job sites may be outdated.
The role covers IS audits of digital payment channels, the Data Centre, SOC, Core Banking Solution (CBS), Loan Origination System (LOS) and other banking applications. It also covers IT GRC controls such as patch, change, user and privileged access, backup, BCP/DR, data protection and configuration hardening, along with compliance with RBI guidelines, PCI-DSS and SWIFT standards.