Manager - Internal Audit (Information Systems Audit)

About the role

The bank is looking for an energetic, service-oriented manager to lead and execute risk-based IT audits covering applications, infrastructure, cybersecurity, cloud environments, digital platforms and technology operations. The role also involves building the Information Systems Audit Universe and producing a multi-year audit plan aligned with the bank's strategy, risk appetite and regulatory requirements.

Key responsibilities

• Plan, scope, test and supervise audit fieldwork, including walkthroughs, control design assessments, data analysis and evidence evaluation
• Evaluate internal controls, risk management and governance processes and prepare clear audit reports with recommendations
• Assess compliance with regulatory requirements such as CBSL directives, ISO 27001 and other industry frameworks
• Use data analytics and continuous auditing to improve audit coverage and timeliness
• Build relationships with IT, business units, Risk, Compliance, external auditors and regulators while keeping independence
• Stay up to date on emerging technologies, cyber threats and regulatory changes and share insights with the Senior Audit team and governance committees

Required profile

• Minimum 7 years of overall experience, including at least 2 years at executive level, with hands-on experience in IT audit, information security, technology risk management or related fields
• CISA, CISSP or GISP; a Master's in information security or in computer science/IT with a specialization in information security
• Banking or financial services experience is a distinct advantage

Required skills

• Strong understanding of technology risk, cybersecurity risks and IT governance frameworks
• Ability to assess controls and identify improvements
• Analytical and problem-solving skills, attention to detail
• Excellent communication, stakeholder management and report-writing skills
• Experience with data analytics tools for audit reviews is an added advantage