Audit Manager, Techonology & Cyber Security

KEY

RESPONSIBILITIES

Audit Planning & Risk Assessment:

• Participate in the annual Technology & Cyber Security risk assessment and audit planning processes.
• Identify key technology and cybersecurity risks across infrastructure, applications, digital channels, and IT operations.
• Recommend audit priorities based on risk exposure, incidents, regulatory updates, and emerging threats

Audit Execution & Fieldwork:

• Execute end‑to‑end IT and cyber-security audits in line with the approved audit plan, methodology, and allocated time budgets.
• Assess the design and operating effectiveness of IT and cybersecurity control areas, including IT general controls, application controls, cybersecurity controls, and technology governance processes.
• Benchmark compliance against relevant IT and cybersecurity standards, frameworks, laws, and regulations.
• Leverage data analytics and automated techniques to enhance audit efficiency, accuracy, and coverage

Reporting & Stakeholder Management:

• Prepare high‑quality audit reports that clearly present findings, associated risks, root causes, and practical recommendations in accordance with the approved methodology.
• Conduct meetings with audit clients to ensure effective communication throughout the audit lifecycle.
• Present audit results to senior management and relevant committees as required.

Maintain strong, professional relationships with Technology, Cyber Security, Risk, and Business stakeholders while preserving audit independence.

Follow-Up, Issue Tracking, and Validation:

• Monitor the remediation of audit findings and validate the closure of open issues in accordance with the audit manual.
• Ensure timely follow‑up and escalate delays that expose the bank to unacceptable levels of risk.

Quality Assurance & Methodology:

• Maintain detailed, high‑quality working papers that comply with the approved audit methodology.
• Ensure audit engagements are executed in a manner that upholds audit quality while fostering positive client relationship and maintaining professional independence.
• Contribute to the continuous enhancement of Internal Audit processes, templates, and the adoption of digital audit tools and technology-driven improvements.

Advisory, Training & Development:

• Serve as a subject‑matter expert on digital transformation, cloud technologies, fintech, data analytics, AI/ML controls, and relevant IT regulatory requirements.
• Conduct ad‑hoc audit assignments or investigations as directed by the Audit Committee or the Head of Audit.
• Provide advisory support while maintaining strict adherence to audit independence.
• Maintain up‑to‑date professional knowledge and continuing professional development (CPD), particularly on regulatory, legislative, and emerging risk and control developments relevant to the bank’s activities.
• Act as a champion for the audit management software and other audit and data analytics tools.
• Complete all mandatory and assigned training programs within the stipulated timelines, ensuring full compliance with Internal Audit and bank-wide learning requirements.

QUALIFICATIONS & EXPERIENCE

Academic Qualifications (Minimum Requirement):

• Bachelor’s degree in Information Technology, Computer Science, Cyber Security, or related field.
• Master’s degree preferred.

Professional Certifications (Minimum Requirement / Preferred):

• Certified Information Systems Auditor (CISA) is required
• CIA, CISM, CISSP, CFE, CRSIC, CGEIT, ACCA, CPA, CFA, Cloud (AWS/Azure), or similar is preferred.

Minimum Experience:

• 6 years or more technology and cyber security experience, including a minimum of 3 years IT auditing experience in financial services or related industry.