IT Audit Manager

About the role

The IT Audit Manager plans, manages and executes audits covering Information Technology, Information Security, Cyber security, Digital Banking, Data Governance and Technology Operations. The role provides independent assurance on the adequacy and effectiveness of governance, risk management and internal controls across the bank's technology environment, supporting the Audit Committee and Senior Management in assessing compliance with regulatory requirements, industry standards and internal policies.

Key responsibilities

• Develop and execute a risk-based IT audit plan covering technology, cyber security, information security, digital banking, cloud computing, data governance and third-party risk management.
• Lead and manage IT audits to assess the effectiveness of governance, risk management, internal controls, processes, procedures and technology infrastructure.
• Evaluate compliance with banking regulations, industry standards and internal policies.
• Use data analytics, continuous auditing and technology-enabled audit techniques to identify control weaknesses, exceptions and emerging risks.
• Prepare clear, concise audit reports communicating findings, risk implications, root causes and recommendations.
• Build relationships with senior management, technology teams, risk management, compliance and other stakeholders.
• Monitor and validate the implementation of agreed audit actions and escalate overdue or high-risk issues.
• Contribute to improving audit methodologies, tools and practices.

Required profile

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cyber security or a related field.
• 5-8 years of overall experience in IT, information security, cybersecurity, technology risk, IT controls or related disciplines.
• At least 3-5 years of progressive experience in IT audit, information security audit, cybersecurity audit, technology risk management or IT controls, preferably in banking or financial services.
• Experience across technology infrastructure, cybersecurity, digital banking, cloud environments, third-party services and data governance is highly preferred.
• Preferred certifications: CISA (highly preferred), CISM, CISSP, CRISC, or other relevant technology, cybersecurity or audit certifications.