Head of IT Audit - Banking

About the role

The Head of IT Audit leads the bank's Information Technology Audit function and provides independent assurance on IT governance, cybersecurity, digital transformation, IT operations, cloud environments and technology risk management. The role covers core banking, digital banking, payments, SWIFT, infrastructure, applications, disaster recovery and business continuity, and works closely with senior management, regulators and business leaders.

Key responsibilities

• Develop and execute the annual IT audit strategy and risk-based audit plan, and lead audits across applications, infrastructure, cybersecurity, cloud platforms, digital banking systems and third-party providers.
• Present audit observations, risks and recommendations to senior management and the Audit Committee, and track remediation of findings.
• Evaluate IT governance frameworks, regulatory compliance (including Central Bank regulations) and alignment of IT strategy with business objectives.
• Audit cybersecurity governance, vulnerability management, IAM, network security, data protection and incident response, against ISO 27001, NIST, CIS, SWIFT and other frameworks.
• Audit data centers, networks, servers, operating systems, databases and cloud environments, including disaster recovery, business continuity and backup.
• Audit core banking, internet and mobile banking, payment systems, cards and digital channels, including SDLC, DevSecOps, APIs and application security.
• Work with business leaders, risk management, compliance and external auditors, and advise on technology risk and control improvements.
• Lead, mentor and develop the IT Audit team, set performance objectives and training plans, and promote continuous improvement.

Required profile

• 12+ years in IT audit, information security, technology risk or IT governance.
• Minimum 5 years in a leadership or management role.
• Proven experience in banking or financial services, with strong exposure to core banking, digital banking, payments, cards and regulatory environments.
• Experience managing enterprise-wide IT audits and technology risk assessments.
• Preferred certifications: CISA, CISSP, CRISC, CGEIT, CIA, CISM, ISO 27001 Lead Auditor, CCSP.

Required skills

• Basel Guidelines, Central Bank regulations, SWIFT Security Controls Framework, COBIT, NIST Cybersecurity Framework, ISO 27001, PCI DSS, ITIL, Risk Management Frameworks.
• Security, banking and IT audit knowledge.