Associate Mgr., Information & Communication Technology Audit

1)    Perform end-to-end audits in IT, Information Security, and Cloud Security from initiation / risk assessment, planning, development of work program and execution, and reporting.

2)    Identify potential risks in AD, DC, DNS, Hypervisor, Virtualization platform, Container based technology and databases.

3)    Ability to write and execute SQL queries independently against production databases (Oracle, SQL Server, MySQL/PostgreSQL)

4)    Identify potential risks related to data security, IT processes, and compliance with regulatory requirements and industry standards.

5)    Plan and design audit procedures and strategies based on the organization's specific needs and objectives.

6)    Conduct audits of IT systems, applications, and processes to assess their effectiveness, security, and compliance.

7)    Maintain detailed records of audit findings, including vulnerabilities, weaknesses, and recommendations.

8)    Ensure that the organization's IT practices adhere to relevant laws, regulations, and industry standards (e.g., BB ICT and Cloud Guidelines, ISO 27001, PCI DSS).

9)    Provide recommendations and action plans to address identified vulnerabilities and improve IT security and efficiency.

10) Communicate audit findings and recommendations to relevant stakeholders, including management and IT teams.

11) Stay updated on emerging threats, technologies, and industry best practices to enhance the organization's cybersecurity posture continually.

12) Keeping updated about banking knowledge, BB guidelines, circulars, auditing standards, changing/ amendment of law/regulations etc.

13) Adequately analyze, assess, and evaluate the risk of IT and Information security systems and applications.

14) Conduct data analysis using suitable Computer-Assisted Audit Technique (CAAT).

         ·       Master/bachelor’s degree from a reputed university in Computer Science/IT/related fields.

         ·       At least four-five years of relevant experience.

• Relevant professional certifications from ISACA, ISC2, IIA, EC-Council, RHCE, CEH, ITIL, etc.
• Experience in IT and banking IT Systems.
• Sound analytical skills.
• Knowledge of risk management and business continuity.
• Stay up to date with the latest IT security and vulnerability management practices.
• Sound knowledge in agile/DevSecOps process.
• Quickly adapt to the dynamic and challenging environment.

Be customer-centric, team player, and keen to develop others