Role Description
Reviewing and auditing the governance and information technology resources and projects,
and the bank's operations on which they are based.
Perform an annual IT risk assessment, develop annual internal audit plans for the organization's insurance and reinsurance entities, and contribute to the IT level risk assessment and internal audit plan.
Execute the internal audit plans; revise those plans and individual audit scopes as
necessary.
Establish objectives for audit scopes to oversee the procedures, discuss observations
with officers, and prepare/review reports.
Ensure audits are executed and reported on within agreed-upon
timetables and budgets
Provide executable recommendations that improve operations, controls, and how the
business is managed. Facilitate the sharing of best practices across the bank's
entities.
Display teamwork, integrity, and leadership. Work collaboratively and develop strong
relationships with business units and operational areas, build respect for the
audit function, and develop the organization's appreciation for a strong
internal control environment.
Maintain proactive involvement in business activities related to new products/services,
systems development, systems conversions, emerging risks, and process
reengineering to ensure that control considerations are evaluated in the early
stages. Coordinate with other risk management functions to identify and assess
internal control risks.
Effectively communicate audit observations, and recommendations, including discussions with executives.
Prepare clear and concise written audit reports and Audit Committee meeting
presentations.
Qualifications & Skills
- Information Technology Assurance Framework (ITAF) published by ISACA.
- Ability to identify areas of high risk, collect data, identify facts, and draw valid conclusions.
- Thorough understanding of audit themes/principles of risk-based auditing.
- The ability to produce multiple outputs in the form of periodic reports
- Bachelor's Degree in computer science, Information Systems, or related technical field.
Additional
- certification(s) in IT Audit like CISA or CISM is required.
- Minimum of 8 years of professional responsibilities related to IT Audit.
