Manager - Internal Audit (Information Systems Audit)
About the role
The Manager - Internal Audit (Information Systems Audit) will lead and execute risk-based IT audits across various technology domains, including applications, infrastructure, cybersecurity, cloud, and digital platforms. The role involves developing and maintaining an Information Systems Audit Universe, planning and conducting audits, evaluating internal controls, preparing audit reports, and ensuring compliance with regulatory requirements such as CBSL directives and ISO 27001. The manager will also use data analytics to enhance audit effectiveness, undertake special assignments, and maintain relationships with stakeholders while staying updated on emerging technologies and risks. Candidates must have significant experience in IT audit or related fields and hold relevant professional qualifications.
Must have
- Minimum 7 years of overall experience, including at least 2 years at Executive Level, with hands-on experience in IT Audit, Information Security, Technology Risk Management, or related disciplines.
- Applicants must hold at least one of the following qualifications: Certified Information Systems Security Professional (CISSP), GIAC Information Security Professional (GISP), Certified Information Systems Auditor (CISA), Master's degree in information security, Master's degree in computer science / information technology with a specialization in Information Security.
- Strong understanding of technology risk landscape including cybersecurity risks and IT governance frameworks.
- Ability to evaluate the adequacy and effectiveness of controls and identify opportunities for improvement.
- Strong analytical and problem-solving skills with the ability to understand complex processes and systems.
- High attention to detail and commitment to delivering quality, thorough, and timely work.
- Excellent interpersonal, stakeholder management, communication, presentation, and report-writing skills.
- Ability to work independently while contributing effectively as part of a collaborative team.
Nice to have
- Experience in the use of data analytics techniques and tools for audit reviews would be an added advantage.
- Additional professional qualifications such as CISM or ISO 27001 Lead Auditor will be considered an added advantage.
- Part qualifications in ACA, ACCA, CIMA, or a Degree in Accountancy or Finance will be considered an added advantage.
- Experience within the banking or financial services sector will be a distinct advantage.
Technologies
- CISM
- CISSP
- Cybersecurity
- Data Analytics
- ISO 27001
Highlights
Applicants must have at least one of the specified professional qualifications (CISSP, GISP, CISA, or relevant Master's degree). Additional qualifications such as CISM, ISO 27001 Lead Auditor, or accountancy certifications are advantageous. Experience in the banking or financial services sector is a distinct advantage.
Also posted as
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka