Assistant Manager/Manager – IT Audit

House Building Finance Company; Karachi Division; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

House Building Finance Company invites applications for the role of Assistant Manager/Manager – IT Audit. The incumbent will lead IT and Operations audit engagements, assess IT controls, risk, and data security, and report findings to management.

The ideal candidate holds a 16-year-equivalent degree in IT, Audit, or related field, with professional certification (CISA preferred) and minimum 3 years of post-qualification experience. Age cap 45, salary commensurate with experience.

Qualifications

• Bachelor’s or Master’s degree in IT, Finance, Audit, CS or related field.
• CISA or similar certification preferred.
• 3+ years of post-qualification experience.

Responsibilities

• Undertake IT and Operational Audits.
• Develop full ownership of assigned audit portfolios and relationships.
• Develop and implement the IT audit plan aligned with objectives and risk.
• Conduct IT audits; review IT systems, processes and controls.
• Identify and communicate risks; assess controls and mitigation.
• Provide recommendations and monitor remediation progress.
• Stay up-to-date with IT audit trends, threats and standards.
• Collaborate with IT and business leaders for risk management.
• Audit reporting and documentation; maintain records.
• Team management and development; mentor junior staff.
• Any other task as assigned by line manager/Group Head – Internal Audit.

Skills

IT audit experience

Communication skills

Analytical skills

Ethical integrity

Risk management

Attention to detail

Team mentorship

IT infrastructure familiarity

Technical audit knowledge

Education

Bachelor's/Master's in IT/Finance/Audit/CS

Tools

Audit software

Data analytics tools

Microsoft Office

Job description

Job Title: Assistant Manager/Manager – IT Audit

Job overview: The position will be responsible to carry to undertake both IT and Operations Audit. The person would be responsible for evaluating and assessing the organization’s IT systems, processes, and controls to ensure compliance, data integrity, and security. Additionally operational audit of some functional departments of the mortgage finance company would also be required to be carried out by the person. Candidate with experience in financial services industry would be preferred.

Qualifications:

• Bachelor’s or Master’s degree (16 years equivalent education) in information technology, Finance, Audit, Computer Science, or related field from HEC recognized institutions.
• Professional certification such as Certified Information Systems Auditor (CISA) or similar will be highly preferred.

Experience (Post Qualification):

Minimum 03 years of relevant experience

Age: Maximum 45 years (as of last date of submission of application)

Number of Vacancies:01

• Undertake both IT and Operational Audits
• Develop full ownership of assigned audit portfolios and establish effective relationships with key personnel in these portfolios in order to stay abreast of changing and emerging risks.
• Develop and implement the IT audit plan: Collaborate with senior management and the internal audit team to develop a comprehensive IT audit plan that aligns with the organization’s objectives and risk profile. This includes identifying key areas for review, determining audit objectives and scope, and establishing appropriate audit methodologies and techniques.
• Conduct IT audits: Perform detailed assessments of IT systems, processes, and controls to evaluate their effectiveness, identify risks, and detect control deficiencies. This may involve reviewing documentation, conducting interviews, and performing testing of IT controls.
• Identify and communicate risks: Identify and communicate potential risks associated with the organization’s IT systems and processes. This includes evaluating the impact and likelihood of risks, assessing the adequacy of existing controls, and providing recommendations for risk mitigation.
• Provide recommendations for improvement: Based on audit findings, develop and communicate recommendations to address control deficiencies and improve IT processes. Collaborate with relevant stakeholders to implement remediation plans and monitor progress.
• Stay up-to-date with industry trends and best practices: Continuously enhance your knowledge of IT audit methodologies, emerging technologies, and industry regulations. Stay informed about IT related threats and trends to ensure the organization’s IT systems remain secure and compliant.
• Collaborate with stakeholders: Work closely with IT and business unit leaders to understand their needs and concerns, address any IT-related issues, and provide guidance on effective risk management and control practices.
• Audit reporting and documentation: Prepare clear, concise, and accurate audit reports documenting findings, recommendations, and management action plans. Ensure that all audit documentation is properly maintained and organized.
• Team management and development: If applicable, provide guidance and mentorship to junior members of the IT audit team. Foster a collaborative and supportive work environment, and assist in their professional development.
• Any other task as assigned by the line manager/Group Head – Internal Audit.
• Excellent communication, presentation & interpersonal skills
• Strong research writing & analytical skills
• Demonstrate strong ethical standards and integrity
• Familiarity with auditing widely used server, platform, database and end-point technologies
• Understanding of IT Governance and IT Risk Management concept
• Ability to work independently and manage multiple tasks simultaneously.
• Attention to detail and ability to maintain a high level of accuracy.
• Proficiency in audit software, data analytics, and Microsoft Office suite.
• Previous experience in IT auditing, information security, or risk management.
• Strong understanding of IT systems, networks, and cybersecurity principles.
• Knowledge of industry frameworks and standards (e.g., COBIT, ISO 27001, NIST).
• Familiarity with relevant laws and regulations (e.g., ETGRF, SBP Regulations).