Job Description

Manager - Information Systems Audit

Internal Audit Division

Job Role

The Manager, Information Systems Audit independently assesses the soundness and effectiveness of the Bank's IT-related controls, in line with regulatory requirement, applicable ISO standards as well as the Bank’s Internal Policies and Procedures, providing assurance to the Board Audit Committee (BAC) on IT governance, cybersecurity, technology risk management and related areas.

Job holder will report to the Chief Internal Auditor and will be responsible to plan & execute risk-based IS audits covering IT governance, cybersecurity, data protection, business continuity, disaster recovery, third-party/outsourcing arrangements and core banking/digital channel systems. He/she will also evaluate the design and operating effectiveness of IT controls, including access, change and incident management processes. Further responsibilities include identifying, investigating and recommending improvements upon review of any incidents related to information systems and evaluation of technology related fraud risk management measures.

Candidate Profile

• Master's Degree in Information Security, or Computer Science/Information Technology specializing in Information Security or CISA, CISSP, CISM or GISP certification;
• ISO/IEC 27001 Lead Auditor/Implementer certification is an added advantage.
• Minimum 8 years' experience in Information Systems Auditing and/or Information Security
• Minimum 3 years' IS Audit experience in a similar capacity within financial services and/or a reputed professional firm.
• Sound knowledge of the CBSL Regulatory Framework on Technology Risk Management and Resilience for Licensed Banks and ISO/IEC 27001 standard
• Strong analytical, reporting and stakeholder communication skills.

Send us your CV to employment@amana.lk, indicating the position applied for in the subject line. Only shortlisted candidates will be notified.

Amāna Bank

Similar Jobs