ITGC Manager – Information Systems Auditor

About the role

We are looking for a detail‑oriented Information Systems Auditor to strengthen our IT control environment. The role focuses on Information Technology General Controls (ITGC), IT Application Controls (ITAC) and cybersecurity controls, ensuring compliance with regulatory standards such as GDPR and SOX.

Key responsibilities

• Assess and test user access, change management and IT operations controls.
• Evaluate system security, backup and disaster recovery processes.
• Identify control gaps, recommend remediation and support external audits.
• Review automated controls in ERP systems and test data integrity, input/output controls and system interfaces.
• Validate configurations and business logic within applications.
• Conduct risk assessments using frameworks like NIST and ISO 27001.
• Assess vulnerability management, incident response and security monitoring processes.
• Plan, execute and document end‑to‑end IT audit engagements.

Required profile

• CISA, BSC IT or equivalent certification.
• At least 5 years of experience conducting comprehensive IT audits, preferably in the banking sector.
• Strong understanding of IT control frameworks (COBIT, ISO 27001, etc.).
• Experience with ITGC testing, including access, change and operations controls.

Required skills

• CISA certification
• ERP systems (D365, SAP, Oracle)
• MS Excel, MS Word, MS Visio
• NIST framework
• ISO 27001
• COBIT
• Vulnerability management
• Incident response
• Security monitoring
• Data integrity testing
• Access management
• Change management
• IT operations controls