Unit Head IT Applications Audit

Responsibilities

Audit Planning and Completion

• Identification of high-risk areas in IT in accordance with the Risk Assessment criteria defined in Audit Procedure Manual.

• Lead audits across operational and IT domains to identify control gaps and recommend remediation measures. Ensure timely completion of audit fieldwork and reporting.

• Conduct post-implementation reviews to assess project governance, risk assessments, and control design, perform audit on the implementation projects to ensure embedded control requirements audits to validate control effectiveness and data integrity.

• Ensure and evaluate business requirement mapping, data migration strategies, system configuration controls and align with regulatory, operational, and security requirements.

• Ensure planning of audit / special review assignments, audit testing and reporting are in accordance with Information Security/IT Policies, applicable standards, best practices and controls frameworks.

• Assess design and operating effectiveness of application controls including authentication and authorization, segregation of duties, transaction processing, input/output validation, reconciliation, exception handling, and data integrity controls.  

• Finalization of reports, including discussion with management and formal release after due reviews.

• Execution of audits / special reviews by utilizing the available resources in efficient manner.

• Assists in preparation of risk-based work program for the audit engagement

• Adhere to IA policies and procedures, including maintaining quality of work, documentation and record management.

Other Reviews / Tasks

• Conduct a review for Core Banking System (CBS) implementation including review of IT Controls. 

• Ensure follow ups on deficiencies reported during past audits.

• Carry out special audits, reviews or other tasks as may be directed by management.

Internal Relations

• Stakeholder management with respect to audits/ special reviews.

• Maintain open communication with management with reference to ongoing engagements and other pertinent matters.

• Strong people management, audit methodology, test design and scripting, data analytics, stakeholder management, persuasive reporting, and ability to translate technical findings into business risk.

Knowledge Enhancement

• Continuous research and learning to gain industry wide knowledge and best market practices to build new audit techniques and make recommendations for improvements to IA systems, reporting etc.

• Stay up to date with best practices, rules and regulations impacting financial institutions and ensuring that the changes are incorporated into the independent assessment process.

• Contribute to professional development of the team by providing guidance regarding industry best practices and instruct them on risks and compliance areas in relation to policies, procedures of the bank and applicable regulations.

• Understanding project phases: initiation, planning, design, development, testing, deployment, post-go live. Familiarity with CBS modules: customer onboarding, deposits, loans, payments, GL, treasury, etc.

Team Management

• Oversee the operational workload of team to ensure that allocated staff are fully utilized to achieve agreed program of work.

• Advise and instruct team members relating to risk and compliance policies relevant to work area to ensure business is not exposed to undue risk

• Display mutual respect within the team as well as with peers, associates and supervisors to deliver quality output.

Qualifications

Minimum qualifications:

• Bachelor’s degree in computer science or comparable field preferably CISA certified.

Minimum experience: 

• 12 years of audit experience, software development assurance or technology risk preferably in Banking industry.