Manager Information Systems Audit (UAE Nationals)

Al Hilal Bank; Abu Dhabi; On-site; AED 240,000 - 360,000; Full time

Job summary

Al Hilal Bank is seeking an experienced IT Audit professional to lead comprehensive IT risk evaluations and independent, value-driven audits. You will plan, execute and report on IT security and controls, collaborating with senior stakeholders across the bank.

The ideal candidate holds a Bachelor’s degree, professional certifications (CISA/CRISC), 6+ years in IT audit, and banking domain expertise. Strong communication and cloud security experience are essential.

Qualifications

• Bachelor's Degree in the appropriate discipline.
• At least one relevant professional certification (CISA or CRISC).
• Minimum 6 years of relevant IT auditing experience.
• Experience with IT projects, security projects, and technology implementations.
• Strong understanding of IT environments and controls.
• Cloud Security and Cloud Computing Audit experience.
• Strong communication and stakeholder management skills.
• Comfortable engaging with senior stakeholders and business leaders.
• Quality and risk management experience.
• Internal control knowledge.
• Financial analysis and management reporting experience.
• Process optimization focus.
• Banking experience is required.

Responsibilities

• Plan, conduct and monitor IT risk evaluations for independent, cost-effective audits.
• Lead and execute IT/digital audits in line with standards.
• Develop IT/digital audit plans and programs for field visits across the Bank.
• Review IT/digital banking policies, systems and procedures for confidentiality, availability, reliability.
• Identify and communicate IT risk, controls gaps and remediation actions.
• Prepare audit findings and reports for senior stakeholders and regulators.

Skills

CISA

CRISC

IT audit

IT security

Cloud security

Stakeholder management

Education

Bachelor's Degree in appropriate discipline

Job description

About the business area - Group Audit

The Internal Audit Group plays a crucial role in providing independent and objective assurance to the Board of Directors. The Group's activities are designed to provide consulting services that add value to the organisation and enhance the quality of the internal control system through a systematic and disciplined approach. Leveraging advanced technologies, data analytics, and professionally qualified auditors. Thus contributing to the effectiveness of the organisation's risk management, control, and governance processes.

In this role, your key responsibilities include

• The role holder is responsible for planning, conducting and monitoring the comprehensive evaluation of IT risks with the aim to ensure execution of an independent, cost effective and efficient risk based technical, security and IT systems audit service. The role is also responsible for conducting audit assignments in a leading and execution capacity, and to deliver high quality, professional, value-added risk-based audit service. Carries duties whilst ensuring that duties are carried out efficiently and professionally and in accordance with the Internal Audit Manual, ISACA and the International Professional Practices Framework.
• The role holder is responsible for planning, conducting and monitoring the comprehensive evaluation of IT risks with the aim to ensure execution of an independent, cost effective and efficient risk based technical, security and IT systems audit service.
• The role is also responsible for conducting audit assignments in a leading and execution capacity, and to deliver high quality, professional, value-added risk-based audit service. Carries duties whilst ensuring that duties are carried out efficiently and professionally and in accordance with the Internal Audit Manual, ISACA and the International Professional Practices Framework.
• Audit Plan and Coverage - Contribute to the development of the IT/ Digital Audit Plan and identify activities for audit coverage, evaluate their significance and assess the degree of risk and plans audit coverage accordingly to mitigate the risk. Identify activities for audit coverage, evaluate their significance, assess the degree of risk and determine audit coverage accordingly to mitigate the risk in an efficient manner.
• Assignment programs- Prepare IT / Digital audit programs and undertake field visits to different areas of the Bank as well as branches, conducting full audits in line with audit program approved by the SMD - Internal Audit. Checks IT/ Digital banking policies, systems and procedures to ensure confidentiality, availability and reliability of computer systems, whilst ensuring that they comply with Bank's policies and procedures as well as applicable laws and regulations.
• Adopt ISACA standards/modules to evaluate the state of IT Risk and Security in AHB; provide management with an assessment of the risk in order to determine action plan and procedure to mitigate concerned risks.
• Assignment Execution - Conduct audit assignments in line with approved IT / Digital audit plan.. Ensure that IT audit working papers are properly documented and maintained in line with IAD standards.
• Conduct reviews of new systems/applications developed by IT or acquired from external vendors from an audit perspective, and providing recommendations as necessary.
• Assignment Reporting - Discuss IT audit findings and recommendations with the SMD - Internal Audit. Draft audit reports to be presented to SMD - Internal Audit, highlighting areas of concern, proposing remedial steps where appropriate and urgent actions when needed. ensure audit deliverables are developed to high quality in line with IAD standards.
• Follow-up - Lead and/or carry out follow up assignments on audit recommendations implemented by management in order to improve internal controls and overall control environment. Upload audit findings upon completion of audits to the AMS.
• Reporting - Prepare & compile IT audit findings status for Central Bank reporting. Maintain finding MIS and ensure adequate and accurate reporting of audit findings status to Group Internal Audit, Risk Management, Financial Control Department and auditee (upon request).
• Fraud Indicators - Identify potential fraudulent indicators related to operational risk and carry out necessary action in order to refer/ report matters towards taking appropriate action.

The ideal candidate should have the following experience

• Bachelors Degree in the appropriate discipline
• At least one relevant Professional Certification e.g. CISA, CRISC etc
• At least 6 years of relevant experience
• Experience working on IT projects, security projects, and technology implementations is highly preferred.
• Strong understanding of IT environments and controls from a practitioner perspective.
• Cloud Security and Cloud Computing Audit experience
• Strong communication and stakeholder management skills are essential.
• Must be comfortable engaging directly with senior stakeholders and business leaders.
• Managing Quality and Risk
• Internal Control
• Financial Analysis and Management Reporting
• Process Optimization
• Banking experience is required