Audit Team Member – Information & Cyber Security Audits (AVP)

About the role

The National Bank of Pakistan is seeking an experienced Audit Team Member to lead Information and Cyber Security audits. Reporting to the Wing Head – Audit Entity Owner, you will play a key role in safeguarding the bank’s technology infrastructure and ensuring compliance with security standards.

Key responsibilities

• Plan, execute and report on technology infrastructure, security and IT audit assignments.
• Conduct independent IS audit tasks in line with approved audit plans.
• Prepare draft audit reports, discuss findings with management and finalize conclusions.
• Assess application and network security controls, perform vulnerability assessments and penetration testing reviews.
• Stay updated on cyber security laws, regulations and best practices.

Required profile

• Minimum 6 years of professional experience in Information Systems Security, Cyber Security or IT Audits within financial institutions or fintech.
• Graduation degree; a Master’s degree or certifications such as CISM, CISA, CCSP, CISSP, ISACA are preferred.
• Strong understanding of system architecture, network design, virtualization and security testing methodologies.
• Excellent communication and interpersonal skills, with the ability to work under tight deadlines.

Required skills

• Kali Linux suite for intrusion testing.
• Security Information and Event Management (SIEM) tools.
• Security Operations Centre (SOC) processes.
• Application security and network security assessment techniques.
• Vulnerability assessment and penetration testing methodologies.