Purpose of the Role:
The Audit Manager, Information Technology plans and manages assigned audits ensuring that the audit meets required global standards and is completed within defined timelines. The incumbent is primarily responsible for audits of the Technology environment, with an emphasis on identifying and evaluating the related risks and controls and reporting on their adequacy and effectiveness. The scope of these activities includes audits related to Technology applications, server infrastructure, cloud infrastructure, networks, information & cybersecurity and service continuity.
.

• Manages assigned audits, including the completion of planning, field work and reporting to ensure that the work is completed in line with audit methodology and standards and within defined timelines.
• Manages technical audit assignments and consulting activities, ensuring that there is a robust review and understanding of the various processes of units and technology / information security best practices to ensure that controls are clearly defined in each audit to accurately reflect the unit’s control environment.
• Leads and supports team of audit managers on an audit assignment basis, providing relevant coaching / guidance on audit testing areas  to ensure that assigned team members performance on audit is acceptable in relation to quality and timeliness of tasks.
• Liaises and collaborates with Technology owners and subject matter experts (SMEs) to maintain proficiency in technology areas based on changing technology environment.
• Undertakes training and certification in key technology areas (cyber / information security, NIST controls, cloud computing to acquire knowledge and expertise to keep abreast of technology changes and improvements.

• Experience leading and coordinating teams and assignments at a unit or regional level.
• Industry experience at supervisory level.
• Good knowledge of / or experience auditing in the following areas: information security, cybersecurity, cloud computing, application management, networking, change management / project management, business continuity / disaster recovery, infrastructure management.
• Knowledge of industry frameworks / standards utilized for IT internal controls (COBIT, NIST CSF, ISO, PCI-DSS etc.).
• Good knowledge and experience in performing technology risk and controls assessments.
• Good understanding of financial services issues, including regulatory requirements.

• 2+ years post qualification experience in core professional qualifications, e.g. CIA, CISA, CISSP, CCSP.
• 2+ years post degree (BSc) experience in technology related areas (computer science, information security, information technology, etc.)

Expiry Date: 28-10-2025