Associate Vice President - IT Audit

Role Overview

What You Will Do

• Plan and execute technology audits independently, including budgeting, fieldwork artifacts, reporting, and delivery within budgeted man-days.
• Assess material gaps against the control environment and business maturity while managing auditee relationships.
• Delegate work, mentor team members, and apply project management, negotiation, and communication skills.
• Assess the completeness of entities, systems, and data across the assigned audit portfolio.
• Review evidence for closure of audit action plans.
• Lead transformation initiatives, skills sessions, and new testing strategies using AI or data analytics.
• Provide timely insight to the Head of Technology Audit on outcomes, challenges, solutions, and forward plans.
• Deliver both planned annual audits and unplanned or regulator-mandated audits.
• Engage stakeholders across the bank to identify technology risk challenges and align GIA strategy.
• Recommend operational and audit improvements that enhance efficiency and remove procedural inertia.
• Monitor emerging technology, macroeconomic, and regulatory risks and adjust audit-plan coverage when required.

Qualifications and Experience

• A bachelor's or master's degree in Computer Science, Information Systems Management, Accounting, or a related field is required.
• At least 10 to 12 years of audit or information security experience in banking and financial institutions is required.
• One or more recognized audit, security, cloud, or emerging technology certifications is listed, including CISA, CISSP, CRISC, CIA, CCSP, AAIA, or ISO 42001.
• Experience with UAE or regional GCC banks is advantageous.
• Excellent understanding of local laws, regulations, international frameworks, and best practices is required.
• In-depth knowledge of audit principles, methodologies, and current IIA standards is required.
• Experience with senior stakeholders, annual audit plans, complex risk commentary, negotiation, and mediation is required.

Key Competencies

• Specialist knowledge of IT infrastructure, networking, information security, cloud security, data security, blockchain or cryptocurrency, artificial intelligence, and risk management.
• Strong oral and written communication, relationship development, organization, time management, adaptability, and multitasking skills.
• Management and leadership capabilities including negotiation, influencing, project management, team management, skills-gap identification, and junior staff development.

Operating Context

• The role works across technology audit, information security, risk, control, business, and departmental leadership functions within a banking environment.
• Audit delivery may include planned annual work and unplanned audits mandated by regulators.