IT Audit Manager

About the role

The IT Audit Manager will support the Internal Audit department in delivering assurance and advisory services that strengthen risk management and help achieve the bank’s strategic objectives. Reporting to the Chief Internal Auditor, the role involves planning, executing, and reporting on IT and cyber‑risk audits across the institution and its third‑party connections.

Key responsibilities

• Assist in developing the annual IT audit plan and defining the audit universe for technology and cyber risks.
• Perform risk assessments, evaluate ICT system controls, and review the effectiveness of the bank’s cyber‑risk management framework.
• Design and execute audit tests to address identified IT risks and verify mitigation measures.
• Conduct full audit cycles – planning, fieldwork, documentation, reporting, and follow‑up – in line with the annual audit schedule.
• Prepare clear audit reports highlighting findings, non‑compliance, and recommended corrective actions.
• Collaborate with IT teams to ensure timely implementation of audit recommendations.
• Investigate suspected fraud or forgery incidents as assigned.
• Support the optimisation of audit tools and software for the department.
• Continuously develop professional knowledge through training and association with relevant bodies.

Required profile

• Bachelor’s degree in Information Systems, Computer Science, or a related field.
• Minimum three years (36 months) of experience in IT audit, IT risk, or cybersecurity within the banking or financial services sector.
• Demonstrated ability to assess both the design and operating effectiveness of IT controls.
• Strong analytical and reporting skills with attention to detail.
• Professional integrity and the ability to work independently under the direction of senior audit leadership.

Required skills

• IT audit methodologies and frameworks.
• Risk assessment and cyber‑risk evaluation.
• Audit documentation and reporting.
• Use of audit software/tools.