Senior Executive - Information Security Audit
IT - Software / DB / QA / Web / Graphics / GIS
About the Employer
Job Description
SENIOR EXECUTIVE INFORMATION SYSTEMS AUDIT
LankaPay Private Limited is the operator of Sri Lanka's National Payment Network. Operating under the guidance of the Central Bank of Sri Lanka, we facilitate approximately 483 million domestic interbank transactions at a value of Rs.45 trillion every year. Our mission is to make convenience an 'accessible' and 'affordable' choice for every Sri Lankan whenever they carry out a financial transaction with a host of innovative, convenient and secure digital solutions via our world-class payment network.
When you join LankaPay, you become a part of this truly Sri Lankan national service. We believe in the potential of our people. LankaPay understands their aspirations, respects their differences and embraces individuality in our culture of purpose and inclusion. You will drive our pursuit of excellence in creating an environment where you enjoy, learn, perform and grow. As a vital member of our team, your work will impact to liven our motto of #ForYourConvenience intended to connect, uplift and enrich the lives of everyone, everywhere and every time they consume our services.
KEY RESPONSIBILITIES & ACCOUNTABILITIES OF THE POSITION
This position holds overall responsibility for assisting the management in the continuous improvement of information systems audit operations including the key responsibilities outlined below.
- Plan and execute IT audits in alignment with established audit methodologies, regulatory requirements and industry best practices.
- Conduct IT General Control (ITGC) audits, document observations and compile findings to comprehensive audit reports.
- Assess the functionality of LankaPay payment systems and evaluate their compliance with established operational guidelines, and regulatory requirements, document observations and compile findings into a detailed report.
- Conduct audits to assess the adequacy of IT and network security controls, benchmark them against industry best practices and recommend enhancements where necessary.
- Evaluate company physical and logical access controls, assess their effectiveness and compliance with PCI-DSS and other relevant standards, and recommendations for improvements.
- Assist in drafting and reviewing the information systems and information security policies, procedures and standards and propose enhancements to align with best practices and organizational needs.
- Review management responses to audit findings and compliance violations to ensure aligning with industry best practices, PCI-DSS and other relevant international standards applicable to LankaPay and assist in formulating effective resolutions.
- Participate in change management initiatives, ensuring alignment between system implementation plans, operational readiness, and the organization's strategic objectives.
QUALIFICATIONS, EXPERIENCE AND PERSONAL ATTRIBUTES
- A degree in information technology/computer information systems or an equivalent professional qualification from a recognized institution.
- Professional certifications such as CISA, CISM, CRISC etc. will be an added advantage.
- 5 years of work experience out of which at least 3 years in information systems audits and related processes.
- Experience with financial and IT system applications, firewalls (functionality and maintenance), Office 365 Security, VSX, and Endpoint Security is referred.
- PCI-DSS compliance and risk management experience along with knowledge of software licensing schemes and software asset management.
- Experience in problem resolution and standardization, project planning and management, stakeholder management, troubleshoot problems and incident management.
- Proven skills in the process of auditing information systems, information systems operations, system maintenance and support, and protection of information assets.
- Ability to work under pressure in a fast-paced environment, strong attention to detail and an analytical mindset.
- Strong communication capabilities, administrative and managerial skills, negotiation skills, strategic networking and social intelligence for trusted team building, interpersonal skills.
The above position offers an attractive remuneration package and benefits in line with industry standards. The selected candidate can look forward to prospects for career growth in a rapidly growing and stable company.
LankaPay is an equal opportunity employer and is committed to diversity, equity, and inclusion in the workplace. We welcome and encourage applications from all qualified individuals, as final selections will be made solely based on merit.
Please send your CV including names and contact details of two non-related referees within 07 days of this advertisement to the e-mail address given below. Applicants should state the post applied in the subject field.
(While we value all applications received, only short-listed candidates will be called for interviews)
Chief People Officer
LankaPay (Pvt) Ltd.
‘The Zenith’,
No. 161A, Dharmapala Mawatha, Colombo 07
E-mail: [email protected]
Web: www.lankapay.net
