To assist Head Internal Audit in the design and implementation of an effective internal control and audit framework for the bank.
To ensure compliance of Information System controls, protect corporate assets, ensure data integrity and are aligned with the business's overall goals.
To examine and evaluate the Bank technology infrastructure, policies and operations as well as overall business and financial controls that involve information technology systems.
Conduct Audits of IT systems, applications, networks, and infrastructure to ensure compliance with internal policies, external regulations and industry standards, such as data protection and cybersecurity regulations.
Work with the Head, Audit Department to create a solid audit procedure and reporting process.
Coordinate/ Supervise specific audit assignments at the Head Office, as approved in the annual audit plan and as directed by Head Internal Audit Department.
Involved in both the Network and Oracle Database Scanning using Imperva and Network Tools.
Evaluate the effectiveness of controls over system development, change management, data integrity, security administration, and disaster recovery.
Collaborate with stakeholders to understand system workflows, identify control weaknesses, and provide practical solutions.
Conduct ISO 27001:2022 (ISMS) Information Security Management System Audit.
Perform Fraud risk assessments of technology systems in conjunction with your department to determine risk based audit.
Track & Validate observed inadequacies in the Vulnerability and Penetration Testing (VAPT) reports to achieve timely, accurate, complete and reliable information outputs, as well as ensuring confidentiality, integrity, availability and reliability of data and adherence to relevant legal and regulatory requirements.
Prepares and presents written and oral reports and other technical information in a pertinent, concise, and accurate manner for distribution to management.
Identify and assess potential risks associated with the bank’s systems, including cybersecurity threats, data breaches, and system failures.
Provide recommendations for system improvements, process enhancements, and risk mitigation strategies.
Evaluate the Bank’s data management practices, including data security, data quality, and data retention.
Qualifications
IT Audit and Information System Audit skills
Strong Analytical Skills
Knowledge of Information Systems and Information Technology
Experience in conducting IT audits and evaluating information systems
Certifications (e.g., CISA, CIA, CISSP) are a plus
Bachelor's degree in Information Systems, Computer Science, or related field
Excellent communication and problem-solving abilities