IS Auditor

About the company

We are a subsidiary of Sri Lanka’s leading private commercial bank Hatton National Bank PLC, and a leader in the finance industry with an immaculate record of over 25 years, offering a diversified portfolio of financial services catering to a multitude of sectors through an integrated network of 76 branches across the island. We are ranked among the top 100 most valuable consumer brands in Sri Lanka by Brand Finance. In view of our growth expectations, we seek highly motivated, dynamic and result oriented individuals to join our organization.

Key responsibilities

1. Conduct IT audits covering core banking systems, applications, and IT infrastructure.
2. Assess information security controls, including data integrity, user access management, and cybersecurity controls.
3. Identify risks and provide practical, value-added recommendations to strengthen internal controls.
4. Review compliance with regulatory requirements (including CBSL guidelines) and internal policies.
5. Follow up on audit findings to ensure timely implementation of agreed action plans.

Qualifications & experience

1. Bachelor’s or master’s degree in information security, computer science, or information technology (preferably specializing in information security).
2. Professional qualifications (completed or partly qualified) such as CISSP, GIAC, or CISA will be an added advantage.
3. Minimum 2-5 years of experience in IT audit, information security, or a related field.
4. Exposure to the financial services or banking sector will be a definite advantage.
5. Knowledge of IT governance frameworks (e.g. COBIT, ISO 27001) and internal audit methodologies.
6. Familiarity with cybersecurity risks, cloud environments, and digital banking systems will be an added advantage.
7. Strong analytical, problem-solving, and communication skills, with the ability to work independently and manage multiple assignments.

A higher position will be considered based on the candidate’s qualifications and experience.

When applying

If you are willing to take up the challenge, forward your resume via e-mail or by post within 10 days of this advertisement along with the details of two non-related referees. Please indicate the post applied for and your preferred location on the top left-hand corner of the envelope or in the subject line of your e-mail.