Head of Information Systems and Vigilance Audit(Job Number: 2300007D)
Description
- Conduct annual business plan using a risk-based approach for Information Systems audits, including branches;
- Implement Information Technology audits for all the relevant technical systems;
- Compliance assessment of regulatory guidelines, policies, and processes;
- Monitor IT general control and application control for its effectiveness;
- Information Technology and Information Security Risk Assessment;
- Risk Assessment of ADC channels, digital banking, and payment gateways;
- Provide consultancy to relevant stakeholders;
- Ensure timely execution of annual audit plans and perform audits to achieve the annual audit plan in critical areas;
- Ensure that sufficient and appropriate audit evidence with necessary supporting documents is collected and audit programs are updated;
- Prepare audit reports, summary reports, audit programs, etc.;
- Keep updated banking knowledge, Bangladesh Bank guidelines, circulars, auditing standards, changing/ amendment of law/regulations, ISO, NIST, OWSAP, etc.;
- Identify significant risk areas and/or control weaknesses and inform the management;
- Assist in conducting investigations, including any other special assignments;
- Ensure that Audit IT systems, platforms, and operating procedures comply with the established corporate standards for efficiency, accuracy, and security;
- Analyze and document all information systems and related controls, and develop an appropriate audit program to test them;
- Analyze, assess and evaluate the risk of core banking, card management, and other satellite and middleware applications from security and regulatory compliance perspective;
- Review audit reports and ensure that recommendations are incorporated;
- Technical assessment of information security solutions, like SIEM, PAM, SOAR, DLP, Web Gateway, Firewall, MDM, etc.;
- Maintaining good liaison with regulators and other stakeholders;
- Present the audit findings, annual planning, etc. to the Management and Board Audit Committee;
- Evaluate IT infrastructure in terms of risk to the organization and establish controls to mitigate loss;
- Technical assessment of payment channels like ATM, POS, EFT, etc.;
- Perform data analysis with appropriate CAAT;
- Perform IT procurement-related pre-audits;
- Sound reporting, reviewing and presentation skills.
Qualifications
- Master/Bachelor’s degree from a reputed university with a satisfactory academic track record;
- At least 07 years of experience in Information Security, IT, bank audit will considered an advantage, but not mandatory;
- Relevant Professional Certifications from ISACA, ISC2, IIA, EC-Council, RHCE, CEH, ITIL, etc.;
- Experience in IT and banking IT Systems;
- Sound analytical skills;
- Prior IT auditing experience;
- Knowledge of risk management and business continuity;
- IT Security and vulnerability management;
- Experience with agile DevOps process;
- Quick adaptability to the dynamic and fast-paced environment;
- Be customer-centric, team player, and keen to develop others.
|
Leave a Reply