IT Auditor

The IT Auditor is responsible for evaluating the adequacy and effectiveness of the bank’s information systems, security controls, and IT governance. The role ensures that technology-related risks are identified and managed, and that systems comply with internal policies, regulatory requirements, and industry best practices.

Key Responsibilities:

• Plan and execute IT audits covering applications, infrastructure, cybersecurity, data privacy, and IT general controls.
• Evaluate the effectiveness of IT controls to ensure integrity, confidentiality, and availability of information systems.
• Perform risk assessments to identify areas of potential exposure.
• Review IT policies, procedures, and operations to ensure compliance with internal standards and regulatory requirements (e.g., BSP regulations, data privacy laws).
• Prepare audit working papers, document findings, and recommend practical solutions.
• Discuss audit observations with stakeholders and assist in developing action plans.
• Follow up on the implementation of audit recommendations to ensure corrective actions are completed.
• Assist in special reviews or investigations related to IT incidents or fraud.
• Keep abreast of emerging IT risks, cybersecurity trends, and regulatory developments affecting the banking industry.
• Contribute to continuous improvement of audit methodologies and tools.

Qualifications:

• Bachelor’s degree in Information Technology, Computer Science, Accountancy, or related field.
• Preferably with certifications such as CISA, CISM, CISSP, or ISO 27001 Auditor
• Minimum of 5 years of experience in IT auditing, IT risk management, or IT operations, ideally in banking or financial services.
• Knowledge of IT frameworks (e.g., COBIT, ITIL), cybersecurity standards, and data privacy regulations.
• Familiarity with automated auditing tools and data analytics is an advantage.
• Strong analytical and problem-solving skills.
• Good written and verbal communication skills.