Manager IT

Manager IT & IS Audit (Mashreq Digital Bank Pakistan)Manager IT & IS Audit (Mashreq Digital Bank Pakistan)

• The incumbent has the authority and responsibility to manage the IT & IS Audit Function of MBPL as Manager IT & IS Audit with direct reporting to Senior Manager IT & IS Audit MBPL.
• Main objective of this position is to ensure that Mashreq Bank Pakistan Limited (MBPL)'s Information Technology and Information Security environment is continuously assessed, evaluated and to ensure that identified control gaps and weaknesses are adequately addressed by the concerned management.
• Implementing Audit's strategic priorities in Internal Audit Function's independent capacity for MBPL.
• Evaluating operational processes related to IT & IS Segments, Regulatory Compliance, Cyber Crime, Cyber Hygiene, Central Data Lake and other functional areas to identify risks and recommend corrective action/process changes aimed at enhancing effectiveness and efficiency of operations and risk management processes.
• Contributing to the improvement of the risk management and internal control system as well as the operational processes and expressing opinion regarding strategically important projects in MBPL (the Bank)
• Under the supervision of Senior Manager IT&IS Audit and Head of Internal Audit MBPL, providing consultative support and guidance to MBPL senior management, where requested, by providing expert professional opinion in product development, process improvement in a seamless manner as processes run through various areas

Key result Areas

• Provide support to Head of Internal Audit in facilitating external audits and discussion with external auditors of major observations arising from interim and final audits and any matter that the auditors may wish to highlight.
• Supporting Senior Manager IT&IS Audit in Performing annual Risk Assessment of MBPL Audit Universe related to IT & IS related areas.
• Ensuring adherence with all applicable ISACA, IIA Professional Standards and Bank's Internal Audit Group's policies and procedures.
• Planning and ensuring that IT & IS audits, reviews are carried out, analyzing, and risk ranking gaps according to various risk and value implication.
• Assisting in the development of action plans as a remedial measure to mitigate composite risks.
• Accurately dimensioning and assigning ratings and communicating the impact of recommended actions.
• Assessing and evaluating action plans to ensure that risk factors and events are addressed in a cost-effective manner and in line with business objectives.
• Providing guidance to Audit teams during routine reviews.
• Developing the scope for any special investigation/assignments which may be requested by Head of Internal Audit, Regulator(s) or management.
• Support in ensuring that MBPL's IT & IS audit is compliant with applicable regulatory requirements primarily State Bank of Pakistan (SBP) guidelines on Internal Audit Function and Securities & Exchange Commission of Pakistan (SECP) and their guidelines on various types of audits that are required to be done.
• As per tasks assigned by Senior Manager IT&IS, review Bank's IT & IS related areas to evaluate their effectiveness, efficiency and compliance with regulatory requirements.
• Independently conducting audits, developing and preparing all IT & IS related audit reports in a professional manner for Senior Manager IT&IS Audit and Head of Internal Audit MBPL and communicating those also with HO and MBPL senior management as required.
• Keep a close liaison with MBPL management whenever required.
• Ensure that regulatory requirements pertaining to IT & IS Audit Division are met in effective and timely manner

Knowledge, Skills and Experience

• CISA/CISM/CIA and Post Graduate in business or finance from Higher Education Commission's approved university with 8 years of experience (mainly in audit) and demonstrated abilities in a banking environment in areas of increasing responsibility; with a minimum of 4+ years spent at managerial level. Chartered Accountant / CPA/ ACCA qualifications will be given preference.
• High caliber person with proven track record.
• Strategic thinker to contribute to the enhancement of the risk management and internal control system.
• Proven track record of managing and interacting with Bank's senior management and managing submissions related to Board Audit Committee and the regulators.
• Team leadership qualities (confident, clarity of thoughts, etc.) and excellent oral and written communication skills.
• Specialized knowledge, comprehension and understanding of products and composite risks especially within Technology & Risk Management, Retail Business Segments as well as Operations, ability to project and assess risk end to end, and those not seen by specialists in each business areas is a must, experience in digital banking space is preferred.
• Preferably have the background to understand and examine Bank's IT/IS controls, evaluate the design and operational effectiveness, determine exposure to risks, and evaluate the following to bring improvement in efficiency and strengthening of internal controls:
• IT Policies, Procedures & Governance Framework.
• Information Systems confidentiality, integrity, and availability.
• Information Security & Cyber Hygiene.
• IT Infrastructure.
• IT Operations and business continuity.
• Result and business oriented disciplined thinker, a self-starter with strong analytical organization.
• Ability to command respect by demonstration of skills and presenting and offering practical and effective solutions is a key success factors.

Seniority level

• Seniority levelMid-Senior level

Employment type

• Employment typeFull-time

Job function

• Job functionAccounting/Auditing
• IndustriesBanking

Referrals increase your chances of interviewing at Mashreq by 2x

Get notified about new Information Technology Supervisor jobs in Karachi Division, Sindh, Pakistan.

We're unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

#J-18808-Ljbffr

---