National Audit Manager - Information Security Audit

Job Description :

- Understanding the existing IT infrastructure and vulnerabilities associated with the IT, Admin, and all enabler functions.

- Performing Risk assessment to prepare RCMs for all new audits, Reviewing the RCMs on an annual basis.

- End to end project and team management on the IT Audits i.e. IT Audits - General IT controls, IT Governance, IT Application, IT Infrastructure/database, IT Network security, IT Asset Management/device, Information Security, Cyber Security.

- Leading and guiding the IS audit team to conduct high quality testing in line with industry standards and as per the project plan.

- Staying abreast of regulatory update and ensuring compliance, keeping himself abreast with all the developments happening in the Banking Industry / within Bank, providing training/guidance to the team on technical aspects and audit approach/methodology.

- Managing multiple tasks, prioritising tasks as per requirements.

- Supervising the IS audit outsourced to third party, Co-ordinating with Statutory / External Auditor of the Bank.

- Reviewing IS Audit assignments being carried by the Team, doing regular follow-up to make sure the completion of audit within timeline.

- Ensuring proper workflow and documentation standards is adhered to by the team in the Audit system.

- Professional development of the team through regular feedback on the projects; discussing their performance appraisal with the Internal Audit Head.

- Discussing Deliverables / Audit report with Process owners/Sr. Management.

- Interacting/liaising regularly with functions/process owners.

- Recommending measures to address any risks or vulnerabilities, ensuring compliance with the specified standards or regulatory mandates.

- Acting as a focal point on all matters relating to IS audit and disseminating regular information and advice when necessary to management and users.

- Assisting the Internal Audit Head in preparation of the Risk-based IS Audit Plan.

- Providing clarification/interpretations of guidelines to Auditee on IS related matters.