Senior Manager - Senior Auditor Information Security Audit with a Large Private Bank

Job Purpose

• Carry out the 1^st level audit of IT General Controls and Information Security Controls primarily in High to Medium Risk Areas
• Assist Team Leads / Zonal Heads in the performance of special assignments and management audits as per the needs of the senior management from time to time.

Job Responsibilities

Carry out audits under supervision of Seniors & assist seniors in making MIS

• Collect evidences from the auditees as per the objectives and scope set
• Basis the evidences collected assess compliance to Banks IT related policies and procedures Information Security related policies and procedures and regulatory guidelines.
• Identify exceptions and form the preliminary audit opinion of the exceptions observed
• Discuss the findings with the Audit supervisor; seek feedback and fine tune the audit where required
• Prepare draft audit findings and discuss with auditees and seek their views / preliminary responses/confirmation of facts.
• Upon release of final report basis the target date provided by the auditees for closure followup with auditees for status of audit recommendations till closure of the reports
• Prepare closure memos in a timely manner
• Assist TLs / ZHs in preparation of 1^st draft of MIS reports on IS audits for various purposes
• Assist TLs / ZHs in preparation of 1^st draft of Work done notes for Audit Committee of the Board

Educational Qualifications

• Should possess at least a Bachelor of Science Bachelor of Engineering/Technology Master of Computer Application/Computer Science or Master in Business Admin/Post Graduate Diploma in Business Administration/Post Graduate Program in Management in Computer Science/Information Technology or equivalent.
• Should preferably have a certification such as CISA / CISSP/ ISO27001

Key Skills

• Should have basic knowledge of IT General Controls. Should have exposure to one or more of the following areas international acts such as SOX IT Governance Frameworks such as COBIT standards such as ISO 27001 ITIL ISO22301 COSO 2013 Payment Cards Industry Data Security Standard (PCI DSS).

Experience Required

• Should have 34 years experience in fields related to IT General Controls / Information Security Controls

senior auditor,information security audit,information system audit,IS Audit,IT Audit,Security audit