Assistant Manager IT & IS Audit

Mobilink Microfinance Bank Ltd; Pakistan; On-site; PKR 1,200,000 - 1,800,000; Full time

Job summary

A leading financial institution in Pakistan is seeking an Assistant Manager for IT & IS Audit. The role involves assessing internal controls, conducting audits, and ensuring compliance with regulations. Candidates should have a Master's or Bachelor's degree in a relevant field and 4-5 years of experience in Internal Audit or IT. International certifications like CISA or CISSP are preferred. This position offers an opportunity to work with stakeholders while ensuring effective governance and risk management.

Qualifications

• At least 4-5 years of previous work experience in Internal Audit/Information Technology/Information Security.
• International certifications are highly preferable.
• Extensive knowledge of best practices and frameworks.

Responsibilities

• Conduct IT & IS audits and reviews of systems, applications and processes.
• Develop audit programs to address major risks.
• Ensure timely delivery of audit engagements.

Skills

Analytical skills

Problem solving

Report writing

Knowledge of ITIL

Knowledge of COBIT

Knowledge of NIST

Knowledge of PCIDSS/SSF

Knowledge of ISO

Education

Masters/Bachelor's degree in Computer Science/Information Technology/Cybersecurity

Tools

CISA

CISSP

CISM

ISMS Lead Auditor

Job description

What is Assistant Manager IT & IS Audit – MMBL?

The Executive IT & IS Audit is responsible for independently and objectively assessing the reliability and effectiveness of governance, risk management, and design & operational effectiveness of internal controls. This includes executing internal audit processes, conducting audit engagements, and developing high-quality audit reports. The role requires adherence to organizational and professional ethical standards, compliance with relevant regulations, following MMBL audit methodology and international standards such as the International Professional Practices Framework (IPPF) by IIA and IT Audit & Assurance by ISACA.

What does Assistant Manager IT & IS Audit – MMBL do?

• Contributes to risk assessment and supports the Head of IT & IS Audit in preparation of annual audit plan, addressing emerging risks and global themes;
• Conduct IT & IS audits and reviews of systems, applications and processes including, pre/post- implementation reviews, cybersecurity reviews, IT landscape/baseline assessments and business application reviews;
• Developing audit programs ensuring that auditing steps will accomplish the objectives, address major risk and exposures;
• Recommend improvements in internal controls designed to safeguard resources and to comply with applicable MMBL’s policies, procedures, State Bank of Pakistan (SBP) laws and regulations;
• Prepares quality and detailed audit work papers that evidence the work performed and any observations that arise; ensure completeness and adequacy of the same and to ensure that appropriate and sufficient audit work has been performed to achieve audit objectives;
• Drafts, prepares and submits audit observations to include them in the final audit report, requiring minimal re-write and/or additional queries, and submit the same to Head of IT & IS Audit for review;
• Fully effective in completion of audits with minimal supervision;
• Ensures timely delivery of audit engagements within the approved timeframe in accordance with the annual audit plan;
• Conduct follow-up on audit observations and evaluate the actions taken by management to address the highlighted risks;
• Maintains effective working relationships with the stakeholders in the areas of assigned work;
• Capable of conducting validations for various assignments as required by SBP;
• Perform any other function in connection with the internal audit assigned by Head of IT & IS Audit.

What are we looking for and what does it require to be Assistant Manager IT & IS Audit – MMBL?

• Holds at least Masters / Bachelor's degree preferably Computer Science / Information Technology / Cybersecurity or equivalent.
• At least 4-5 years of previous work experience in Internal Audit/Information Technology/Information Security;
• International certifications (CISA, CISSP, CISM, ISMS Lead Auditor or equivalent) are highly preferable;
• Extensive knowledge/work experience of best practices and frameworks including ITIL, COBIT, NIST, PCIDSS/SSF, ISO etc.;
• Analytical, problem solving and good report writing;
• Energetic, flexible and agile attitude.

Job Locations

• Head Office