Senior IT Auditor – BBS BANK LIMITED

The incumbent will provide support to the internal audit function by analyzing and assessing adequacy and efficiency and effectiveness of Bank’s enterprise technology (ET) infrastructure (including hardware, software, and processes) and cybersecurity.

Key Performance Areas:

• Conduct IT risk assessment by understanding business objectives, internal controls, enabling technology, and IT infrastructure.
• Prioritize and assist in scheduling audit tests to be performed, and interact with auditees to obtain the necessary information, prepares working papers, documenting adequately work performed.
• Provides concise and high-quality reports summarizing as necessary the findings arising from audit work.
• Proactively identifies emerging risks to assist in determining risk-based audit plan as approved by board.
• Perform audit work over various technologies utilized by the Bank and various IT functions. Assess both the design and operating effectiveness of internal controls.
• Assists in the delivery of the annual approved audit plan.
• Communicates emerging risks and threats to internal and external stakeholders.
• Evaluate controls designed to prevent or detect fraud, including management override on records, procedures, performances, and controls.
• Ensures audit documents (narratives, process flows, risk assessments, programs, workpapers, etc.) and reports, with minimal revisions required, capture the procedures performed, support conclusions reached, identify internal controls and control weaknesses, and provide value-added recommendations.
• Plans, leads, and executes risk-based IT audits and consultation projects within a team based on agile auditing approach using established internal and IT auditing standards to determine compliance with established policies, standards, and legal requirements.
• Assists on enquiries from Regulators and External Assurance providers.
• Assists in performing work required by Regulators and External Assurance providers.

Qualifications:

• Bachelor’s Degree in Information Systems/ Computer Science/ Information Technology/ Management Information or related field.
• Industry certification required-Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM) or any related industry certification.
• Membership of an internationally recognized institution such as Information Systems Audit and Controls Association (ISACA) and Institute of Internal Auditors-IIA is mandatory.

Experience:

• Three (3) to five (5) years of progressive auditing experience with 1+ years of system auditing and programming analysis experience.
• Data analysis and visualization tools such as ACL, MS Office, MS Business Intelligence.
• Understanding of audit functions, procedures and related regulations.