Job Purpose
To perform complex IT audit and special assignments in accordance with the Internal Audit Charter and annual audit plan with a focus on applications, technology infrastructure (such as networks, databases, platforms), and IT processes (such as security, business continuity, change management, asset and service management.
Key Accountabilities
Audit Work Standards
Plan and execute IT audits and assignments in line with the Bank’s audit methodology and operating procedures.
Risk Assessment
Participate in review and update of IT risk assessments for the annual audit planning exercise and during the execution of planned and unplanned assignments.
Technology Projects
Participate as an independent consultant in projects involving significant information technology risks and provide recommendations to enhance controls as and when assigned.
Application Review
Review the adequacy and effectiveness of the Bank’s application systems.
Infrastructure Review
Review the adequacy and effectiveness of the Bank’s infrastructure.
IT Process Review
Review the adequacy of the Bank’s Policies and Procedures over IT processes.
Maintain Technical Competence
Maintain awareness of Technology and Cyber Security trends, best practices in governance, risk, and compliance.
Add Value
Provide value added workable recommendations both on assignments and/or consultancy projects.
Continuous Auditing
Actively participate in the enhancement of IT continuous auditing related activities.
Other Accountabilities
Other Accountabilities
Job Context
To ensure efficiency in IT audit processes, infrastructure and projects whereby adhering to the Bank’s and department’s strategic objectives. To ensure strict compliance and control in the audit process.
Education
Experience and Skills
Professional Qualifications
IT audit qualification such as CISA/CISM/CISSP is required
CISA or equivalent
Work Experience
Minimum 5 years experience in IT audit combined.