We are seeking a highly skilled and forward-thinking Audit Manager – Technology to join our Internal Audit function, specializing in Digital Platforms, DevOps, and Business Banking technology environments. Reporting to the Senior Internal Audit Manager / Country Head of Audit, you will independently evaluate the effectiveness of IT controls, digital frameworks, and technology-enabled processes across the Bank.
You will provide assurance that technology risks are appropriately managed, systems are secure, and operations comply with internal policies, regulatory requirements, and cybersecurity/AML standards. This role requires strong expertise in modern banking technology landscapes, including digital channels, agile delivery, and DevOps practices.
- Plan, lead, and execute technology audits covering digital platforms, DevOps pipelines, and business banking systems.
- Assess the adequacy and effectiveness of IT general controls (ITGCs), application controls, and cybersecurity frameworks.
- Develop comprehensive audit plans, identifying key technology risks, control points, and critical systems.
- Evaluate risks related to digital transformation initiatives, cloud environments, APIs, and system integrations.
- Review DevOps processes including CI/CD pipelines, release management, change controls, and automation practices.
- Identify control weaknesses, security gaps, and operational inefficiencies, recommending practical remediation actions.
- Prepare detailed audit reports with clear risk ratings and actionable improvement plans.
- Review and validate closure of audit findings, ensuring remediation actions are effective and sustainable.
- Participate in technology-related projects, system implementations, and digital product launches to provide risk advisory support.
- Engage with IT, Digital, and Business Banking stakeholders, providing insights and contributing to the development of the annual audit plan and technology audit universe.
- Bachelor’s degree in Information Technology, Computer Science, Engineering, or related field (Master’s preferred).
- Professional certifications such as CISA, CISSP, CIA, or equivalent.
- Minimum 7–10 years of experience in IT/Technology Audit within banking or financial services.
- Strong knowledge of digital banking platforms, online/mobile channels, and business banking systems.
- Hands-on experience with DevOps environments, including CI/CD tools, agile methodologies, and automated controls.
- Solid understanding of cybersecurity principles, ITGCs, cloud computing, and API security.
- Familiarity with regulatory frameworks, IT governance, and data protection standards (e.g., ISO 27001, NIST).
- Proven ability to lead audits and engage with technology and business stakeholders at senior levels.
- Strong analytical, problem-solving, and technical report-writing skills.
- Knowledge of IIA standards and technology audit methodologies, with the ability to apply them in complex digital environments.
Responsibilities
- Manage & assess non-conventional banking risks: Build and maintain an audit universe, utilize risk assessments to prioritize complex areas like FinTech, new technologies, and innovative channels.
- Drive risk-based audit planning: Identify and analyze emerging risks, provide input for annual audit plans, and contribute to developing regular and project-based audits based on comprehensive risk assessments.
- Execute comprehensive audits: Actively participate in various audit types, including country, technology, group-wide, and thematic audits, evaluating control design, operational efficiency, and regulatory compliance. Identify weaknesses and propose improvements to mitigate risk and safeguard assets.
- Deliver high-quality audit execution: Ensure adherence to agreed scopes and standard methodologies, assessing control effectiveness against bank policies and procedures.
- Collaborate and build consensus: Discuss audit findings with management throughout the process, ensuring agreement on actions to address identified risks. Develop and present action plans to stakeholders, securing commitment to implement corrective measures and prevent future issues, and ensure timely follow-up till closure.
- Provide in-house consulting: Conduct reviews and participate in special assignments like system development projects. Identify control gaps and recommend best-practice improvements.
- Support major initiatives: Actively engage in key projects, testing system controls during development and post-implementation to ensure effectiveness.
- Rigorously adhere to all established systems, procedures, and review criteria.
Ensure timely completion of tasks while maintaining professionalism and adherence to internal audit standards (Charter/Manual) and International Standards for the Professional Practice of Internal Auditing.
Qualifications
- Graduate from a reputable computer science/engineering university with exposure to business and accounting principles.
- Hold relevant certifications like CISA, CISSP (or ISACA equivalents) or relevant data analytics credentials with additional advantages from CIA, CFA.
- 5+ years' experience in IT audit or worked in digital projects, ideally within Big 4, banking, or FinTechs, demonstrating expertise in risk assessment, control testing, and emerging technologies like cloud, DevOps, and Agile.
- Fluent in Arabic and English, possessing strong analytical, communication, and presentation skills for effective project management and collaboration.
- Experience in providing project assurance reviews for critical organizational changes.
