Unit Head IT Applications Audit

We are seeking a seasoned IT Audit professional with extensive experience in leading audits across operational and IT domains, particularly within the banking sector. The ideal candidate will be responsible for identifying high-risk IT areas, conducting thorough audits, and ensuring compliance with regulatory and internal standards. This role demands strong stakeholder management skills, technical expertise in audit methodologies, and the ability to translate complex technical findings into actionable business risks. The candidate will also play a key role in mentoring team members and enhancing audit processes through continuous learning and industry best practices.

Key Responsibilities

- Identify high-risk IT areas based on risk assessment criteria outlined in the Audit Procedure Manual.
- Lead audits covering operational and IT environments to detect control gaps and recommend effective remediation measures, ensuring timely completion of fieldwork and reporting.
- Conduct post-implementation reviews to evaluate project governance, risk assessments, control designs, and validate the effectiveness of embedded controls and data integrity.
- Assess business requirement mapping, data migration strategies, and system configuration controls to ensure alignment with regulatory, operational, and security standards.
- Plan and execute audit and special review assignments in accordance with Information Security/IT policies, applicable standards, and control frameworks.
- Evaluate the design and operating effectiveness of application controls, including authentication, authorization, segregation of duties, transaction processing, validation, reconciliation, exception handling, and data integrity.
- Finalize audit reports after thorough discussions with management and formal reviews.
- Efficiently utilize available resources to execute audits and special reviews.
- Assist in preparing risk-based work programs for audit engagements.
- Adhere strictly to internal audit policies and procedures, maintaining high-quality documentation and record management.
- Conduct reviews of Core Banking System (CBS) implementations, focusing on IT controls.
- Follow up on deficiencies identified in previous audits to ensure timely resolution.
- Perform special audits, reviews, or other tasks as assigned by management.
- Manage stakeholder relationships related to audits and special reviews, maintaining open communication with management on ongoing engagements and relevant issues.
- Demonstrate strong people management skills, audit methodology expertise, test design and scripting capabilities, data analytics proficiency, and persuasive reporting.
- Continuously research and stay updated on industry best practices, regulatory changes, and emerging risks affecting financial institutions, incorporating these into audit processes.
- Provide guidance and training to team members on industry best practices, risk, and compliance areas relevant to the bank’s policies and regulations.
- Understand all project phases, including initiation, planning, design, development, testing, deployment, and post-go-live, with familiarity in CBS modules such as customer onboarding, deposits, loans, payments, general ledger, and treasury.
- Oversee the team’s operational workload to ensure optimal utilization of resources and achievement of audit objectives.
- Advise and instruct team members on risk and compliance policies to mitigate business exposure to undue risk.
- Foster a respectful and collaborative team environment to deliver high-quality audit outputs.

Required Qualifications

- Bachelor’s degree in Computer Science or a related field.
- Certified Information Systems Auditor (CISA) certification is highly preferred.
- A minimum of 12 years of experience in audit, software development assurance, or technology risk, preferably within the banking industry.

This role offers the opportunity to work in a dynamic environment where technical expertise and leadership skills are valued. The successful candidate will contribute significantly to strengthening the organization’s IT audit function and risk management framework.