The role is responsible for executing IsDB’s IT audit plans to identify risks associated with business processes, automated controls and evaluate the general controls of IT infrastructure and support services, ensuring adequate safeguards over access, physical and logical security policies for all data centres and IT resources.
Key Accountabilities:
Delivering IT Audit Activities:
Assist in the preparation of the yearly Information Technology Audit plan.
Implement the audit plans by examining and reconciling documentation, reports, statements, records, and memos to gather all the needed information on the IT infrastructure and support services including internal accounting controls, operational controls, administrative controls, organizational security policies and procedures, overall policies for the design and use of adequate documents and records, procedures and practices to ensure adequate safeguards over access, physical and logical security policies for all data centers and IT resources.
Execute identified reviews in annual IT audit plan for the effectiveness of IT operational activities (infrastructure, information/ cyber security, applications, technology platforms, etc.) in order to ascertain whether control operate effectively and ensuring accountability for decision-making and implementation of decisions.
Execution identified reviews in annual IT audit plan for the effectiveness of IT operational activities in Regional Hubs.
Review of IT applications and underlying systems to ensure effective design and implementation as well as operating effectiveness is achieved.
Execute IT audit support to other internal audit units (i.e. Corporate and Operations) for testing information technology controls, reports, and data analysis for business internal audit assignments.
Prepare a concise and informative audit report to effectively communicate the findings and recommendations to the branch/department and senior management.
Conduct follow-up on IsDB Management’s implementation of internal audit recommendations and participate in the preparation of follow-up reports to the President and audit committee.
Participate as necessary in IT and Risk committees as an observer to gain an understanding, and advice when needed, on the decisions made by the committee and their implications.
Provide advice and recommendations to IsDB Management (based on the findings of internal audits) and discusses impact of risk related areas.
Operational Excellence:
Ensure effective implementation and adherence to policies, procedures and controls so that all relevant procedural / professional requirements are fulfilled.
Keep abreast of the latest developments, regulations and leading practices in the field and propose any necessary actions.
Propose and implement process improvements to increase efficiency, effectiveness and compliance of the related business processes.
Academic and Professional Qualifications:
Bachelors’ degree in Information Technology, Computer Science or any related fields.
Professional Auditor qualification, CISA, or CISM preferred.
Minimum 8 years of experience in IT audit, in large organizations or audit firms.
Skills & Necessary Knowledge:
Audit operations.
Audit methodologies and processes.
Corporate Governance.
Internal Control and Compliance.
Information Systems Audit.
Fraud and corruption detection and investigation.
Teamwork.
Building Relationships.
Client Centricity and Responsiveness.
Motivation to Learn and Share.
Adaptability.
Analytical thinking.
Problem solving.
Attention to detail.
Computer Assisted Audit Tools and Techniques (ACL, Process mining tools, Power-BI, Nipper, Nessus).
