Audit Head – IT and Information Security

Job Purpose:

To support Group Audit in providing an independent opinion to Senior Management and the Audit Committee on the adequacy and effectiveness of internal controls. It includes:

• Delivery of audit assignments as per the annual plan and scope or ad-hoc requests
• Providing ongoing auditable entity risk assessment and input to the annual audit plan
• Managing relationships within the organization and/or external parties
• Provide subject matter expertise over audit activities performed throughout the Group
• Provide independent advisory to business, project, working groups and governance committees
• Applying and contributing to the continuous improvement of Audit tools and methodology development & practices

Principal Responsibilities, Accountabilities and Deliverables of Role:

The job includes responsibilities for overseeing and driving global audit coverage of subject matters primarily related to:

• Group Chief Operating Officer (Group Information Technology, Group Cyber & Information Security and Group Business Continuity Management);
• Group Operational Risk Management (including IT Risk)
• Digital Businesses & Channels

In addition, the job includes responsibilities as the Audit Relationship Manager for:

• ila Bank - key liaison and coordination of the cyclical audit coverage
• AFS - overseeing the delivery of the internal audit plan by the Head of Audit of our group partner AFS (Arab Financial Services), a CBB licensed service provider of cards, electronic payments and Fintech solutions.

Some of the key deliverables are:

• Deputy to the Group Chief Auditor when required
• Delivering the annual plan for audit coverage;
• Managing the designated audit team;
• Managing relationship with key stakeholders e.g. Heads of Function/Department
• Supporting on-going tracking, validation and closure of audit issues and associated action plans
• Providing independent advisory to business, project and governance committees
• Advising the Audit Quality Assurance & Support function on continuous audit process improvement on methodology, practices and supporting technology
• Coordinating Group Audit Subject Matter Expert activities related to:

1.  review and feedback on audit approach for scoping, testing, issues and reports to support audit coverage of ABC Units in driving consistency and quality
2.  build and maintain audit programs / risk and control matrices with support from audit SMEs from different ABC Units for the respective subject matters
3.  coordinate auditable entity risk assessments for the respective subject matters to support the prioritization of audit plans

Knowledge

• Subject matter expert (hands-on or auditing) in at least 3 areas enlisted below:

1. Information Technology (including cloud)
2. Information & Cyber Security
3. Business Continuity Management
4. Digital, Online and Mobile Banking
5. Personal Data Protection
6. Operational Risk Management (including IT & Cyber Risks)
7. Operational Resilience

• Strong understanding of banking, corporate governance and the 3 lines of defense model
• Excellent spoken and written English language skills
• Proficiency in at least one other ABC business language (French, Arabic or Portuguese) would be desirable
• Experience with risk-based auditing techniques
• Thorough understanding of banking products and services and related risks and controls, in special Corporate Credit, Trade, Treasury, Retail & Digital Banking
• Familiar with the regulatory environment under which banks are operating
• Familiar with industry best practices and control frameworks

Education / Certifications

• University Degree in Technology, Information Security or Risk Management preferred
• Post-graduation desirable
• Professional Qualification in auditing, technology, information security or risk management is expected

Experience

• Minimum 12 years of Audit/Assurance experience, preferably in Banking/Financial Services
• Proven experience in the identification and assessment of risks and controls related to Operations & Technology
• Familiarity with and exposure to different audit methodologies and with workflow-based audit software
• Development and delivery of presentations to senior management and board members
• Line Management

Personal attributes

• Excellent organizational skills and ability to work proactively without supervision, hands-on attitude
• Excellent attention to detail and analytical skills
• Strong judgment and decision-making skills
• Ability to influence change and instigate process improvement
• Ability to lead individuals from diverse backgrounds
• Ability to manage conflict and work under pressure
• Strong time management and results orientation
• Strong interpersonal skills to ensure effective interactions with all levels in the business
• Ability to speak confidently to senior stakeholders
• Flexible and positive approach to work, ‘can do’ attitude