Reporting
Wing Head - Audit Entity Owner / Lead Reviewer IT Infrastructure & Applications ReviewsEducational / Professional Qualification
Minimum Graduation or equivalent from a local or international university / college / institute recognized by the HEC of Pakistan.Candidates having certification related to CISA / CISM / CISSP / CRISC / ISO 27001, Data analytics, machine learning, Data Security & Privacy and / or relevant other IT / IS certifications related to Information / Cyber Security, would be preferred
Experience
Minimum 06 years of professional experience in IT Infrastructure and / or Communication Networks and / or Cyber Security and / or Digital Banking, and / or IT Applications within Financial institutions and / or Fintech sectorsPreferably within roles of Information Technology / Information Systems (IT / IS) departments and / or Risk Management and / or Audit Functions
Other Skills / Expertise / Knowledge Required
- Good understanding of digital systems, cloud computing and data security / privacy
- Understanding to review vulnerability assessment and penetration testing reports of IT Applications and Digital channels
- Knowledge / understanding of IT Applications Security, input data processing and output controls
- Knowledge of technology infrastructure architecture for digital channels, systems configurations and disaster management controls etc.
- Good Communication and interpersonal skills
- The ability to work in a fast-paced, deadline-driven environment that demands high quality, creative and consistent work
- Knowledge of hacking techniques and their remedies / controls to be in place
- Understanding cyber and information security related laws and regulations, best practices, etc.
- To conduct audits related to digital banking and business applications, along with other specialized assignments, and-or reviewed Is Audit plans
- To review IT Applications Security, input data processing and output controls
- To review technology infrastructure architecture for digital channels, systems configurations and disaster management controls for IT Applications etc.
- To review the internal control environment for IS / IT assets and ensure security best practices, regulatory requirements, and frameworks are embedded in digital banking and IT / IS projects
- To perform IS audit assignments independently or under supervision, ensuring comprehensive coverage of controls and compliance requirements
Outline of Main Duties / Responsibilities
- To prepare and issue draft audit reports, engage with relevant stakeholders for discussions, and finalize audit reports upon conclusion
- To analyze documentation and validate the implementation of security recommendations identified during IS audits of digital banking, IT Applications and information security
- To generate and submit periodic audit reports, MIS summaries, and dashboards to relevant stakeholders
- To identify weaknesses in the design and implementation of controls in digital platforms, business applications, and IS-related processes
- To coordinate with focal persons to provide required information and documentation to SBP inspection teams, external auditors, and law enforcement agencies as needed
- To perform any other assignment as assigned by the supervisor(s)
Place of Posting
KarachiSubmit Application
Get your application noticed! Upload your CV/resume, and we'll connect you with the employer.
Submit your CV/Resume directly:
Related Jobs
Audit Team Member - Information & Cyber Security Audits
National Bank of Pakistan
Karachi, Sindh
Application Security Analyst
National Bank of Pakistan
Karachi, Sindh
Project Manager - Enterprise
National Bank of Pakistan
Karachi, Sindh
Unit Head - CBA Technology
National Bank of Pakistan
Karachi, Sindh
Database Security Analyst
National Bank of Pakistan
Karachi, Sindh