Information System (IS) Auditor (Assistant Manager | Manager)

Key responsibilities

1. Prepare and submit the draft annual IS audit plan specifically for the information systems audit unit.
2. Execute and oversee the comprehensive branch and department IS audit plan (evaluating IT security, core banking systems, application controls, and IT general controls).
3. Manage effectively the technical audit resources allocated to the ISA unit to ensure timely completion of both branch IS audits and departmental IS audits.
4. Systematically follow up on technical audit queries and IT control findings until they are satisfactorily resolved.
5. Prepare and present structured summaries of unresolved IS audit and cybersecurity issues for senior executive review.
6. Review and update IS and IT audit programs on a continuous basis, integrating changes in technology, cybersecurity threats, and regulatory expectations.

The person specification

1. A degree in information technology (IT), computer science, information systems, or in a related technology field from a recognized university.
2. Certified Information Systems Auditor (CISA) qualification or a diploma in information systems auditing (DISSA) is strictly mandatory.
3. Extensive high-level exposure and experience in IT audit and information security, including experience in managing a team of technical staff qualified in IS auditing within a banking or financial environment.
4. Willingness to travel outstation to branch locations for systems audits, and the commitment to work flexible/long hours as necessary to meet audit plan timelines.

Benefits

1. The chosen candidate will be provided with an attractive remuneration package, including fringe benefits on par with benchmarked financial institutions.

About the company

A fully owned subsidiary of Commercial Bank of Ceylon PLC. Join a leading finance company and be a part of a dynamic, fast-growing team! We are looking for a highly driven, detail-oriented internal audit professional to strengthen our internal controls, risk management, and governance functions.

When applying

If you are confident that you meet the above expectations, please forward your CV within 14 days of this advertisement with the details of two non-related referees to [email protected]