The posting
Job Description
The AVP – IT Audit will lead and manage the delivery of risk-based IT audits, provide assurance and identify technology risks under the supervision of IT Audit leadership. Their remit will include reviewing closure evidence for Findings/Action Plans, supporting the audit team in completing Audit Universe (AU) design and annual audit planning. Expectations will also include building effective relationships across teams within the bank. Competencies will involve completing and commenting on First- and Second-Line’s Risk Management over IT and Cybersecurity controls, Resilience and Continuity controls, and Emerging Technologies that have been adopted – like Blockchain, AI.
What you Will Do:
- Take a lead role in planning and executing Technology audits independently end-to-end. This will include planning, man-day budgeting, completing pre- and post- fieldwork audit artefacts (incl. Reporting) within the budgeted man-days. -End-to-End delivery responsibilities will include effective judgement of Material gaps on balance with control environment & business maturity. All this whilst managing conflicts and maintaining strong working relationship with the auditee. -Lead role in audit delivery will require effective project management, delegation and mentoring skills. -Effective communication and analytical skills – with a strong ability to relay complex information in simple executive pitch. It is beneficial to have good visualisation and presentation skills to aid delivery of clear analytical thinking/messaging.
- Contribute to the development of the IT Audit Universe (AU) and is directly responsible for assessing the completeness of entities, systems, and data across the assigned portfolio – in service of the audit plan.
- Complete assessment of evidence submitted for the closure of Audit action plans.
- Participate, and lead different initiatives that aid in GIA’s transformation agenda – these could span transformation initiatives (e.g. adoption of new workflow tooling), skills enhancement/teach-in sessions, development of new testing strategies/approaches (via the adoption of AI/data analytics).
- Effectively upward manage the Head of Technology Audit, giving timely insight on material outcomes, and upcoming challenges. These insights should include – a view on upcoming challenges, viable alternative solutions, forward plans to deliver key tasks, effective project/people management and identifying opportunities for growth & skills development.
- Flexibility and adaptability are key to balance the demands of delivering audits that are both Planned (part of the pre-approved Annual Audit plan), and un-Planned (e.g. Regulator mandated).
- Good cross-functional relationship/stakeholder management is expected to help identify area’s facing technology risk challenges across the bank via engagement across Divisions - at relevant levels of the organization. This helps to ensure that GIA strategy is aligned with the rest of the Bank.
- Recommend opportunities to enhance and improve existing audit and/or operational activities to bring about enhancements that lead to efficient operations/removing procedural inertia.
- Be a self-starter and take on training journeys that help improve their professional skills and competence with regards to their career goals while ensuring these align with the department’s needs.
- Drive continuous improvement in support of the strategic view and objectives for GIA and collaborates with other departmental Heads and Vice President (VP’s) to deliver leading edge business solutions.
- Monitor market conditions to remain aware of new and emerging risks arising from macro-economic factors, emerging technologies and regulatory changes impacting the Group and assess the impact to the Annual Audit Plan to ensure coverage is reprioritized and refocused if required.
What We Are Looking For:
- Bachelor’s or Master’s degree in Computer Science, Information Systems Management, Accounting, or other related fields.
- One or more industry recognized audit, security, cloud, emerging technology professional certifications (e.g., CISA, CISSP, CRISC, CIA, CCSP, AAIA, ISO42001).
- At least 10 - 12 years of experience in Audit or Information Security within Banking and Financial institutions. Experience of having worked with UAE / Regional GCC Banks would also be advantageous.
- Excellent understanding of local laws, regulations, international frameworks, and best practices
- In-depth knowledge of audit principles, practices, methodologies, best practice and latest IIA standards and developments
- Experience of liaising, and building strong, credible & effective working relationships, with senior stakeholders.
- Experience of leading and delivering annual audit plans / projects / initiatives.
- Experience of having prepared and/or presented complex risk commentary to senior executives.
- Experience of effective negotiation & mediation skills – which result is positive results for the audit and also the enhance the cross-functional relationship between auditee – and - auditor.
Key Competencies:
- Technical (specialist knowledge of IT infrastructure, Networking, Information security, Cloud security, Data Security, Blockchain/Crypto currency, Artificial Intelligence and Risk management)
- Interpersonal (oral & written communication, relationship development & management, organization & time-management, adaptability & multi-tasking).
- Management & Leadership (negotiation & influencing, thought leadership, project management, department & team management, skills gap identification, junior staff motivation and development)
