Manager, Information System Auditor

Job Purpose:

The Manager, Information Systems (IS) Security Audit is a key member of the Internal Audit Team tasked with performing cyber security audits throughout the Bank's IS Infrastructure and Business Applications. The role involves auditing complex computer applications and technological solutions in accordance with IS Workplans, professional standards on IS auditing, Internal Audit Methodology, processes, procedures, and timeframes.

Key Responsibilities:

• Perform IT security audits across the bank’s IT infrastructure, including DTB Group.
• Conduct Vulnerability Assessment and Penetration Testing (VAPT) across the DTB Group.
• Review digital products, software development, and related systems/Applications/APIs/software.
• Assess Software/System development life cycle, management methodology, and security benchmarks.
• Review cloud deployments, infrastructures, and security postures.
• Participate in any IT-related investigations as needed.

Skills & Qualifications:

• BSc. in Information Technology/Computer Science or other IT-related degrees.
• Certification in Cybersecurity (OSCP, C-PENT, or equivalent VAPT courses).
• Certification in IT Audit (CISA, CISM, CEH, CHFI, CISSP).
• Certificate in Cloud Engineering.
• 5 years of practical work experience in VAPT and software development, preferably in the financial services industry.
• Good understanding of programming languages such as Python, Java, JavaScript, React, Node.js, etc.
• Good understanding of databases such as Oracle, SQL, Cassandra, MongoDB, PostgreSQL, etc.