Senior Manager of Internal Audit – Technology

Role Summary

Pre-Audit Planning

• Develop and oversee the annual technology audit plan aligned with IT governance, cybersecurity, and organizational risk strategies.
• Conduct IT risk assessments and create audit programs tailored to technology and digital risks.
• Lead opening meetings with executive IT management to discuss audit scope, objectives, and timelines.

Audit Execution

• Supervise and guide the technology audit team during IT audit assignments.
• Review and approve IT audit workpapers for sufficient, factual, reliable, relevant, and useful evidence.
• Evaluate IT controls, infrastructure, cloud environments, cybersecurity, data privacy, and IT governance.
• Oversee documentation of IT issues, management responses, and audit-report findings.

Post-Audit Activities

• Lead comprehensive IT audit reports covering key findings, technology risks, and recommendations.
• Ensure timely follow-up on IT audit recommendations and validate corrective actions implemented by management.

Communication and Coordination

• Manage relationships with senior management, colleagues, and relevant external parties.
• Coordinate with IT risk management, cybersecurity, and other assurance functions on IT governance, risk, and compliance.
• Communicate audit progress, results, and insights to key stakeholders.

Education and Certification

• Bachelor's or master's degree in computer science, information systems management, or a related field.
• One or more recognized audit, security, cloud, or emerging technology certifications, such as CISA, CISSP, CRISC, CIA, CCSSP, or CISM.

Experience

• At least 10-12 years of experience in internal or external IT audit.
• Good understanding of fintech or banking concepts, products, and procedures.
• Good understanding of AI, ideally with practical experience in a fintech or banking environment.
• Excellent understanding of local laws, regulations, international frameworks, and best practices.

Technical Skills and Competencies

• Specialist knowledge of IT infrastructure, networking, information security, cybersecurity, cloud security, data privacy, data security, blockchain, artificial intelligence, and risk management.
• Management and leadership skills including negotiation, influencing, thought leadership, project management, team management, skills-gap identification, and junior staff development.
• Interpersonal skills including communication, relationship management, organization, time management, adaptability, and multitasking.

Compliance