The Information System Audit department is a function within the Audit division. The department is responsible for providing objective and independent assurance that the bank’s Information Systems are appropriate, well utilized, reliable and secure while giving commensurate recommendations on areas of improvement.

Reporting to the Senior Manager, Cyber Security Audit, the Manager, Cyber Security Audit will carry out cyber security related audits and advisory assignments across the Group that will give objective and independent assurance that the bank’s Information Systems and ICT infrastructure are appropriate, well utilized, reliable and secure while giving commensurate recommendations on areas of improvement.

Key Responsibilities

1. Conduct cyber risk assessment for assigned cyber security audit and advisory assignments.
2. Perform independent threat and vulnerability assessment and penetration test audits of the bank’s ICT systems to assess the effectiveness of the cybersecurity control framework and report on cyber risks noted.
3. Conduct walkthroughs, testing of controls, and negotiating potential issues for Technology audits within the cybersecurity and infrastructure portfolio, including scope areas such as identity and access management, asset classification, network security, operating system security, database security, web application security, mobile application security, public cloud (AWS/GCP/Azure) environments, vulnerability management, endpoint protection, etc.
4. Documents the results of audit work in accordance with internal audit guidelines and the Institute of Internal Auditors (IIA) standards.
5. Share knowledge, skills, and experience with team members.
6. Perform other related duties as assigned.

The Person

For the above position, the successful applicant should have the following:

1. Bachelor’s degree in information technology, Electrical Engineering, Computer Science, Business, or a Related field from a university recognized by Commission for University Education.
2. Must Possess CISA/CISM/CISSP or a related Information Systems Audit / Security certification.
3. Must Possess LPT/Offensive Security Certified Professional (OSCP)/CCIE Security/CSX Practitioner/ Certified Red Team Expert (CRTE) or a related penetration testing or red team exercise certification.
4. Master’s degree is an added advantage.
5. A minimum of 4 years’ experience in IT Security and/or IT Audit covering 3 years in Cyber Security Reviews and Vulnerability Assessments and 3 years in Red Team Exercises and/or Penetration Testing Experience.
6. Must possess proficiency in using penetration testing tools e.g., Kali Linux, Nessus, Nipper, Burp suite, Metasploit framework, Wireshark, Acunetix, Netsparker, Mobsf, Frida, BeEF, Objection etc.
7. Must possess proficiency in performing security assessments on operating systems, database management systems, web applications and mobile applications. 
8. Must possess proficiency in the use of audit management software e.g.  TeamMate.
9. Must possess excellent audit report writing and presentation skills.
10. Must possess excellent customer service skills, strong business analytical skills, superior communication, and inter-personal skills.
11. Must possess effective planning, organizing and problem-solving skills.

The above position is a demanding role for which the Bank will provide a competitive remuneration package to the successful candidate. If you believe you can clearly demonstrate your abilities to meet the criteria given above, please log in to our Recruitment portal and submit your application with a detailed CV.

To be considered your application must be received by Friday 29th September 2023

Qualified candidates with disability are encouraged to apply.

Only short-listed candidates will be contacted.

Apply Now

Uploaded: 2023-09-20 00:00:00  Deadline: 2023-09-29 00:00:00  Reference Number: 1509