AVP, IT Audit, Group Audit

About the role

As a member of the Technology and Digitalisation (TAD) audit team, this role supports the delivery of assigned technology audit engagements in line with the Group Audit methodology and regulatory expectations. It combines technology expertise, data analytics and audit judgement to deliver assurance in a fast-changing digital and regulatory environment.

Key responsibilities

• Take part in technology audit engagements, reviewing the Bank's IT infrastructure, technology controls and IT-related processes.
• Carry out audit work according to the Bank's internal audit methodology, covering planning, fieldwork, reporting, issue follow-up and closure.
• Support the rollout of Continuous Auditing (CA) initiatives and their wider adoption across technology audit areas.
• Work with technology auditors to develop and improve data analytics use cases, dashboards and automated routines to better sample, detect anomalies and generate audit insights.

Required profile

• Recognised degree or equivalent professional qualification in Information Systems, Computer Science, Engineering or a related field, with 6 to 8 years of relevant experience.
• Experience in one or more technology domains such as Windows, Unix, AS400, firewalls, network devices, databases, security operations or application delivery, applied in an audit or assurance context.
• Basic understanding of cybersecurity control domains such as vulnerability management, network security, secure application controls, detection and response and data leakage prevention.
• Good writing and interpersonal communication skills.
• Candidates with strong data analytics, programming or automation backgrounds are encouraged to apply even without a traditional audit background.

Required skills

• Data analytics, visualisation and scripting skills (e.g. SQL, Python or equivalent tools) are preferred.
• Professional certifications such as CISA, CISSP and CISM are an advantage but not mandatory.