Role Summary

Lead and manage the delivery of risk-based IT audits, and special projects, in accordance with AstraTech policies, procedures, global internal audit standards, and applicable regulatory requirements. Provide assurance and identify technology risks. Expectations will also include building effective relationships across teams within the group. Competencies will involve assessment and insights on First and Second-Line's Risk Management over IT and Cybersecurity controls, Resilience and Business continuity controls, and Emerging Technologies that have been adopted, such as Blockchain and AI.

Responsibilities

Pre-Audit Planning:

Develop and oversee the execution of the annual technology audit plan, ensuring alignment with IT governance, cybersecurity, and organizational risk strategies.
Conduct IT risk assessments to identify key areas for review and develop comprehensive audit programs tailored to technology and digital risks.
Lead opening meetings with executive IT management to discuss audit scope, objectives, and timelines for each technology audit engagement.

Audit Execution:

Supervise and guide the technology audit team during the execution of IT audit assignments, ensuring compliance with IT audit standards, frameworks, and methodologies.
Review and approve IT audit workpapers, ensuring they provide sufficient, factual, reliable, relevant, and useful information to support audit findings.
Evaluate the effectiveness of IT controls, IT infrastructure, Cloud environments, cybersecurity measures, data privacy compliance, and IT governance, providing recommendations for improvement.
Oversee the documentation of IT-related issues raised, management responses, and ensure the accurate reflection of these in audit reports.

Post-Audit Activities:

Lead the drafting of comprehensive IT audit reports, summarizing key findings, technology risks, and recommendations for senior management and the Audit and Risk Committee.
Ensure timely follow-up on IT audit recommendations and validate the implementation of corrective actions by management.

Communication and Coordination:

Develop and manage relationships with senior management, colleagues and relevant external parties to discuss current and future issues and ensure their requirements and concerns are addressed.
Coordinate with IT risk management, cybersecurity teams, and other risk assurance functions to ensure a cohesive approach to IT governance, risk, and compliance.
Communicate IT audit progress, results, and insights to key stakeholders, ensuring transparency and alignment with technology risk management objectives.

Compliance and Professional Standards:

Coordinate with IT risk management, cybersecurity teams, and other assurance functions to ensure a cohesive approach to IT governance, risk, and compliance.
Communicate IT audit progress, results, and insights to key stakeholders, ensuring transparency and alignment with technology risk management objectives.

Ensure compliance with the group's policies, procedures and guidelines together with all relevant regulatory and statutory requirements to protect the Bank's business at all times

Requirements

Bachelor's or master's degree in computer science, Information System Management, or other related fields.

Professional Certificates

One or more industry recognized audit, security, cloud, emerging technology professional certifications (e.g. CISA, CISSP, CRISC, CIA, CCSSP, CISM).

Experience

At least 10-12 years of experience in internal or external audit (IT Audit).
Good understanding of fintech/ banking concepts, products and procedures.
Good understanding of AI and ideally practical experience in fintech/ banking environment.
Excellent understanding of local laws, regulations, international frameworks, and best practices.

Technical Skills & Competencies

Technical (specialist knowledge of IT infrastructure, Networking, Information security, Cyber security, Cloud security, Data privacy and Data Security, Blockchain/Crypto currency, Artificial Intelligence and Risk management).
Management & Leadership (negotiation & influencing, thought leadership, project management, department & team management, skills gap identification, junior staff motivation and development).
Interpersonal (oral & written communication, relationship development & management, organization & time-management, adaptability & multi-tasking).

Senior Manager of Internal Audit Technology