Purpose of the Role:

The role holder will be responsible for carrying out a detailed evaluation of IT-dependent internal controls and audit review of the Bank’s information systems and projects using specified methodology and in accordance with Department and professional standards. The position holder will perform IS audit engagement planning, execution and reporting working closely with the IS Audit Managers

Key Responsibilities / Deliverables:

• The role holder will actively participate in performing risk assessments during annual planning as well as engagement planning.
•   Undertake audit engagements as assigned and within specific time budgets and quality parameters to achieve the Internal Audit Plan. 
• Carry out walkthroughs and document process gaps i.e. carry out risk assessments, develop audit programs or update existing audit programs based on the risk assessments done.
•   Adopt the use of Teammate, available audit tools and leveraging on 
•  Bank’s core systems to achieve efficient, effective, and quality audits assignment.
•  Clearly report on audit findings

Qualifications

Knowledge, Skills and Abilities

• Bachelor’s degree in computer science, Information Technology, or a related field
• Certified Information Systems Auditor (CISA) or equivalent certification
• 2–3 years of cumulative experience in Information Systems Audit within a reputable audit firm or financial institution
• Strong understanding of auditing concepts and practices in line with professional audit standards
• Knowledge of the banking or financial services industry, including:
• Business processes
• Risk and control environments
• Supporting business systems and technologies
• Solid IT knowledge with emphasis on:
• General IT operations
• Enterprise IT infrastructure and networks
• Cybersecurity and data privacy
• Emerging technologies such as cloud computing
• Familiarity with common IT platforms, including:
• Operating systems
• Relational databases
• Network and mobile technologies
• Oracle databases
• Unix/Linux and Windows environments
• Understanding of IT frameworks, principles, and best practices related to:
• IT operations
• Cybersecurity
• Project delivery (e.g., ISO 27000, ISO 20000)
• Excellent report writing skills
• Strong team leadership and supervision capabilities
• Self-driven with the ability to work under minimal supervision and demonstrate maturity
• Team player with strong interpersonal, communication, and stakeholder management skills
• Strong analytical and problem-solving abilities