Assistant Manager- Information Systems Audit

• Perform a survey of functions and activities in assigned areas to determine the nature of IT operations and controls in place.
  

• Conduct IT general control reviews and IT application control testing to evaluate the effectiveness and efficiency of the control environment. Identify potential risks and vulnerabilities in the bank’s technological environment and provide recommendations to mitigate these risks.
  

• Support cyber risk assessments and audit activities focused on information security, data integrity, access management, and disaster recovery capabilities.
  

• Keep abreast of changes in relevant laws, regulations and industry best practices related to technology and information security. Ensure that the bank’s technology practices align with these requirements.
  

• Manage the audit resources in individual audit assignments to ensure that professional standards are maintained and execute all assigned audit steps within the approved time budget.
  

• Prepare and present audit findings, recommendations and reports to senior management during and after the audit. Discuss observations and recommend corrective action to improve operations.
  

• Review the work performed and verify deliverables to ensure the audit objectives are achieved, and audit documentation is completed as per the IA methodology.
  

• Coordinate with other audit executives to provide technology support to all integrated audits.
  

• Track the implementation of the audit recommendations, follow up with the auditee to get an update on the audit action plan and appraise the adequacy of corrective actions taken to mitigate the risks.
  

• Provide input for the revision of audit programs/review approaches to achieve specific objectives in a more effective/efficient manner.
  

• Maintain quality in carrying out audit assignments to ensure performance of all audits, at a high level of efficiency and effectiveness and in accordance with the Internal Audit Charter, which is consistent with the Global Internal Audit Standards (GIAS).
  

• Cultivate a culture of learning and development; seek coaching and mentoring from line managers and team members to enhance skills and capabilities.
  

• Advise management on new developments that affect the IT portfolio/controls and provide solutions proactively. Communicate complex technical audit concepts clearly and in a concise manner to non-technical stakeholders.
  

• Leverage technology solutions and foster innovation to enhance IA efficiency and effectiveness.
  

All the above accountabilities include, but are not limited to, any additional/new tasks or responsibilities assigned to you.

Dimensions / Context (scope of the job – responsibility for managing)

Financial

The financial implications of audit findings pertain to the departmental budget, opportunities for reducing IT operational expenses, identified avenues for maximising revenue, and decreases in staff-related costs.

• Audit findings are to be evidenced by audit points and summaries.
  

Job Complexity/Judgment

• Ability to manage and ensure that engagements are performed in a systematic, disciplined manner and with due professional care and efficiency within a defined time frame.
  

• Ability to liaise with audit clients and ensure that audit findings are presented in a positive and constructive form.
  

• Ability to provide audit recommendations that detect revenue leakages/enhancement opportunities, improve controls, reduce costs, provisions and operational losses.
  

• Ability to review and analyse the results arising from assignment planning, tests performed and identify the cause of system failures, potential effects, and actions necessary to remedy situations.
  

Key Relationship (Internal & External)

Internal interactions

Within the Department- Manager IT Audit, Audit team members and the Head of Audit

External interactions:

Job Specification

• Professional Certifications such as CISA, CISM, CGEIT, CISSP, CIA, etc.
  

• Good understanding of IT risks, controls, cybersecurity frameworks, and regulatory compliance in the banking sector.
  

• Excellent communication and interpersonal skills, able to liaise with IT and business teams effectively.
  

• High level of integrity, attention to detail, and a willingness to learn and adapt in a dynamic environment.
  

Minimum 4-6 years of experience in Information Systems Audit, preferably three years in a banking environment.

Behavioural: Team Orientation, but can work independently, Customer Focus, Assertiveness, Analytical Thinking, Ownership & Accountability, Change & Innovation Agility, Digital Mindset.

Organization Reporting Relationship

Reporting to: Manager- Information System Audit

Other positions in the same unit: None