Job Purpose

Lead the development and execution of the Technology Applications audit strategy, focusing on evaluating the effectiveness and efficiency of Technology Applications, Systems, and Processes. Ensure compliance with regulatory and industry standards, and identify areas for improvement to enhance the overall Technology and Information Security controls within the Bank.

Key Result Areas

Collaborate with Internal Audit senior management to design a risk-based audit coverage strategy, set audit priorities, and deliver independent evaluations of the technology applications audit process. 

Work alongside other audit seniors to provide technological support for comprehensive bank-wide integrated audits. 

Recognize emerging risks by engaging with business units to understand organizational changes, and conducting risk assessments in these areas. Establish the scope and objectives for technology application audits to ensure alignment with industry best practices. 

Assess internal controls within critical technology risk domains to guarantee adherence to internal policies and relevant laws and regulations. Provide guidance to management regarding new developments impacting the portfolio or controls and offer proactive solutions. 

Carry out technology audits by examining the design and operational effectiveness of controls, ensuring compliance, and pinpointing weaknesses and vulnerabilities.

Set performance standards and evaluate whether these standards and deadlines are met. Oversee audit work, ensuring it follows the planned methodology and is completed within the agreed timeframes.

Counsel and guide auditors to ensure that the approved audit objectives are met and adequate coverage is achieved. Develop team skills by identifying training needs and ensure that subordinates keep abreast of professional developments

Identify and assess technology- related risk, evaluate the adequacy and effectives of internal controls, security measures, and operation resilience, ensuring appropriate controls are in place to mitigate potential risks. 

Prepare comprehensive audit reports detailing findings and management action, present audit results to senior management including key risk areas, control deficiencies and opportunities for improvement.

Maintain updated industry knowledge and requirements, ensure that subordinates are kept abreast of professional developments, monitors professional development programs for assigned employees. Communicate complex technical concepts and audit findings in a clear and concise manner to non-technical stakeholders.

Support the creation of excellence and high performance organization culture by embedding learning and creativity, in order to incorporate agility to accelerate transformation.  

Review and assess the adequacy and effectiveness of the bank's IT controls related to advanced digital footprint, including but not limited to, cloud, API, microservices, and emerging technologies.

Knowledge, Skills and Experience

• Bachelor's degree in IT, Computer Science or related field.
• At least 10 years of experience in IT, preferably in the banking industry
• Certified Information Systems Auditor (CISA), CISSP and or other relevant professional certifications.
• In-depth knowledge of IT audit methodologies, tools, and techniques related to cybersecurity and recent technology stack including but not limited to, cloud, API, microservices, and emerging technologies.
• Strong analytical and problem-solving skills, with a focus on identifying and mitigating risks related to advanced digital footprint.
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical issues to both technical and non-technical stakeholders.
• Ability to work independently, lead a team, and collaborate across departments.