Senior IT Auditor – Information Systems (AVP/AM)

About the role

A leading Islamic bank is seeking a dynamic Senior IT Auditor to lead information systems audit activities. The role involves evaluating IT controls, identifying technology‑related risks, and ensuring compliance with regulatory and internal standards within a banking environment.

Key responsibilities

• Conduct IT audits according to approved plans and methodologies.
• Review and assess IT General Controls, application controls, and information security controls.
• Evaluate the effectiveness of IT governance, risk management, and compliance frameworks.
• Assess compliance with regulatory requirements, internal policies, and industry standards.
• Identify control weaknesses, recommend corrective actions, and monitor remediation progress.
• Prepare audit reports, document findings, and communicate recommendations to management.
• Collaborate with business and technology stakeholders to understand processes, systems, and associated risks.
• Support continuous enhancement of IT audit practices and risk assessment processes.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, Information Systems or a related field.
• 3–5 years of experience in IT audit or information systems audit, preferably in banking or financial services.
• Familiarity with State Bank of Pakistan Enterprise Technology Governance & Risk Management (ETGRM) Framework.
• Knowledge of Institute of Internal Auditors (IIA) standards and their application.
• Professional certifications such as CISA, CIA or equivalent are preferred.
• Strong analytical, communication, stakeholder management and report‑writing abilities.

Required skills

• IT General Controls (ITGC) assessment
• Information security and cybersecurity controls
• IT risk management, governance and compliance
• State Bank of Pakistan ETGRM Framework
• Institute of Internal Auditors (IIA) standards
• Core banking systems and digital banking platforms
• IT infrastructure audit techniques