Job Purpose:
- The conversion of digital channels is bringing new opportunities for organisation and at the same time introduces new risks & thus reshaping organizational security and risk management focus. New technologies like biometric authentications, mobile and cloud computing require organisations to reassess their preparedness for cyber attacks & data privacy. Our new digital banking initiative focuses on creating innovative products and services to integrate banking into our customers’ digital lifestyle and at the same time provide seamless, secured & joyful banking experience.
- Within the Bank, IT Audit is setting the standard to audit the future of banking. Our function IT audit team covers at a broad level Digital Banking systems, IT Infrastructure and Cyber Security. The incumbent would be responsible for execution of the IT audit projects.
Key Accountabilities:
- You will be a team player in auditing digital banking landscape. Your primary responsibilities will be auditing both Run-The-Bank (digital banking systems & operations) and Change-The-Bank (digital banking projects) activities in Bank’s Digital Business & Processes.
- Infrastructure systems and processes form the backbone of our bank. As an infrastructure auditor, you will assess key IT processes such as system/network security management and IT Operations.
- As the Cyber security expert, you will be assessing and monitoring the adequacy of the Bank cyber defence structure and operation.
- Note: Where appropriate, you will also participate in any of above audits.
Job Duties & Responsibilities:
- Execute the assigned audit engagements efficiently and effectively and communicate audit findings and recommendations.
- Undertake audit projects to provide reliable and independent assurance.
- Identify & assess potential risks in accordance with current regulatory requirements & evolving technology landscape in digital banking initiatives.
- Advise and apprise promptly the Head of Internal Audit and/or VP of the team of all major risk, control and regulatory issues arising during the audit.
- Establish and build relationships with stakeholders.
- Define and develop Continuous Auditing scenarios for digital banking areas.
- Contribute in knowledge sharing within the team.
- Keep abreast of own professional development to enhance one’s skills and competence in Technology.
Requirements:
- Banking
- Financial Institutional
- Technology
- Consulting
Required experience:
- 5 to 9 years in Information Systems Auditing, Information Security or Technology Risk Management domain (preference will be given for experience in Banking & Financial services industry in above domains)
Technical Knowledge:
- Digital Banking delivery channel adoption
- Internet web hosting, mobile, Wi-Fi
- Multi-channel distribution / convergence
- Mobile application development & testing
- Source code review
- Malwares, attacks & defences
- Network Security Architecture
- Systems Security operations & surveillance
- Vulnerability Assessment / Penetration Testing (Application Security Testing)
- Technology- Infrastructure security & processes
- Network devices security (e.g. firewalls, intrusion detection system, virtual private network, wireless, switches & routers)
- System & database platforms (e.g. Wintel, Unix, Mainframe, Oracle, MS SQL, DB2)
- IT processes & related standards (as below)
- Data Centre Operations
- Change Management
- Security events & incidents monitoring
- System Configuration baseline controls
- End-points security, data loss prevention
- Authentication & Access Management
- Risk assessment frameworks such as PCI-DSS (payment card industry-data security standards, ISO-27001 Information Security Management System & COBIT)
- Cloud Computing
- Biometric technology
- Mobile devices platforms (android, i-OS)
- Non-Technical skills (soft skills)
- Good communication skills – spoken and written
- Team Player – Ability to work with cross-functional teams.
- Banking product domain knowledge acquisition
- Treasury and Markets, Securities, Finance, Risk Management and Islamic Banking
- Institutional Banking and Global Transactions Services
- Consumer Banking and Wealth Management
- User requirements understanding
- Application release functionalities validation
- Security / controls design assessment
- Regulatory compliance relating to Technology
- Data Analytics
- Risk assessment particularly in regard to assessing the probability and impact of an internal control weakness.
- Application Development Knowledge
- Agile project management
- Mobile application development
