Senior Auditor - Information Security Audit - Bank

Job Purpose

- Carry out the 1st level audit of IT General Controls and Information Security Controls, primarily in High to Medium Risk Areas

- Assist TLs / ZHs in the performance of special assignments and management audits as per the needs of the senior management from time-to-time.

Job Responsibilities:

Carry out audits under supervision of Seniors & assist seniors in making MIS - Collect evidences from the auditees as per the objectives and scope set

- Basis the evidences collected, assess compliance to Bank's IT related policies and procedures, Information Security related policies and procedures and regulatory guidelines.

- Identify exceptions and form the preliminary audit opinion of the exceptions observed

- Discuss the findings with the Audit supervisor; seek feedback and fine tune the audit, where required

- Prepare draft audit findings and discuss with auditees and seek their views / preliminary responses/confirmation of facts.

- Upon release of final report, basis the target date provided by the auditees for closure, follow-up with auditees for status of audit recommendations till closure of the reports

- Prepare closure memos in a timely manner

- Assist TLs / ZHs in preparation of 1st draft of MIS reports on IS audits, for various purposes

- Assist TLs / ZHs in preparation of 1st draft of Work done notes for Audit Committee of the Board

Educational Qualifications:

- Should possess at least a Bachelor of Science, Bachelor of Engineering/Technology, Master of Computer Application/Computer Science or Master in Business Admin/Post Graduate Diploma in Business Administration/Post Graduate Program in Management in Computer Science/Information Technology or equivalent.

Key Skills:

- Should preferably have a certification such as CISA / CISSP - Should have basic knowledge of IT General Controls. Should have exposure to one or more of the following areas - international acts such as SOX, IT Governance Frameworks such as COBIT, standards such as ISO 27001, ITIL, ISO22301, COSO 2013, Payment Cards Industry Data Security Standard (PCI DSS).

Experience Required

- Should have 3-4 years experience in fields related to IT General Controls / Information Security Controls

Major Stakeholders:

- Staff of IT / BTG / ISG