Manager IT & IS Audit

About the role

The Manager IT & IS Audit independently assesses the reliability and effectiveness of governance, risk management, and internal controls across the organization. Reporting to the Head of IT & IS Audit, the role ensures audit engagements are executed in line with MMBL policies, SBP regulations, and international standards such as the IIA IPPF and ISACA IT Audit & Assurance.

Key responsibilities

• Contribute to risk assessment and support preparation of the annual audit plan, addressing emerging risks and global themes.
• Conduct IT audits, including pre/post‑implementation reviews, cybersecurity assessments, IT landscape baselines, and business application reviews.
• Develop audit programs that address major risks, ensure timely completion, and meet allocated resources.
• Recommend improvements to internal controls to safeguard resources and ensure compliance with MMBL policies and SBP regulations.
• Prepare detailed audit work papers and draft audit observations for final reporting.
• Ensure audits are completed with minimal supervision and delivered within the approved timeframe.
• Follow‑up on audit observations and evaluate management’s remediation actions.
• Assist the Head of IT & IS Audit in communicating audit strategy and presenting findings to senior management.
• Seek opportunities to increase audit efficiency, including the use of data analytics and new audit tools.

Required profile

• AVP grade or equivalent seniority, reporting directly to the Head of IT & IS Audit.
• Strong adherence to organizational and professional ethical standards.
• Knowledge of MMBL policies, SBP laws, and international audit frameworks (IIA IPPF, ISACA).
• Ability to work independently, deliver high‑quality audit reports, and maintain effective stakeholder relationships.

Required skills

• Data analytics for audit efficiency.
• Familiarity with IIA International Professional Practices Framework (IPPF).
• Understanding of ISACA IT audit standards.

What we offer

• Opportunity to lead high‑impact IT audit engagements within a leading organization.
• Collaboration with senior leadership and exposure to strategic risk management.