Manager - Internal Audit (Information Systems Audit)
About the role
The Manager - Internal Audit (Information Systems Audit) will lead and execute risk-based IT audits across applications, infrastructure, cybersecurity, cloud environments, digital platforms, and technology operations. The role involves developing and maintaining a risk-based audit universe, performing audit planning and execution, evaluating internal controls, preparing audit reports, and ensuring compliance with regulatory requirements. The position also requires the use of data analytics to enhance audit effectiveness and involves building relationships with various stakeholders while maintaining independence. Candidates should have a strong understanding of technology risk, analytical skills, and experience in IT audit or related fields. The role is within a banking context and requires relevant professional certifications.
Must have
- Minimum 7 years of overall experience, including at least 2 years at Executive Level, with hands-on experience in IT Audit, Information Security, Technology Risk Management, or related disciplines.
- Applicants must hold at least one of the following qualifications: Certified Information Systems Security Professional (CISSP), GIAC Information Security Professional (GISP), Certified Information Systems Auditor (CISA), Master's degree in information security, Master's degree in computer science / information technology with a specialization in Information Security.
- Strong understanding of technology risk landscape including cybersecurity risks and IT governance frameworks.
- Ability to evaluate the adequacy and effectiveness of controls and identify opportunities for improvement.
- Strong analytical and problem-solving skills with the ability to understand complex processes and systems.
- High attention to detail and commitment to delivering quality, thorough, and timely work.
- Excellent interpersonal, stakeholder management, communication, presentation, and report-writing skills.
- Ability to work independently while contributing effectively as part of a collaborative team.
Nice to have
- Experience in the use of data analytics techniques and tools for audit reviews would be an added advantage.
- Additional professional qualifications such as CISM or ISO 27001 Lead Auditor will be considered an added advantage.
- Part qualifications in ACA, ACCA, CIMA, or a Degree in Accountancy or Finance will be considered an added advantage.
- Experience within the banking or financial services sector will be a distinct advantage.
Technologies
- CISM
- CISSP
- Cybersecurity
- Data Analytics
- ISO 27001
Highlights
Applicants must have at least one of the following: CISSP, GISP, CISA, a Master's in information security, or a Master's in computer science/information technology with a specialization in Information Security. Additional qualifications such as CISM, ISO 27001 Lead Auditor, or part qualifications in ACA, ACCA, CIMA, or a degree in Accountancy or Finance are considered advantageous. Experience in the banking or financial services sector is a distinct advantage.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka