Senior IS Audit & Cybersecurity Lead

Khanewal; Lahore; On-site; PKR 1,800,000 - 3,200,000; Full time

Benefits offered by this job

Competitive remuneration

Equal opportunity employer

Long-term career growth

Job summary

Bank of Punjab seeks an experienced professional for the Internal Audit Group – Information Systems Audit Division. You will evaluate cybersecurity hygiene, information security, and IT applications, and develop risk-based IS audit plans to strengthen controls.

You will lead major IS audit engagements, assess policy frameworks, and report findings to CIA and the Board Audit Committee. The role requires expertise in IT risk, regulatory alignment, and effective governance.

Qualifications

• Bachelor’s degree or equivalent from an HEC-recognized university.
• Graduates in IT/CS/software engineering preferred.
• Certifications such as CISA, CEH, ISO 27001, or CISM are plus.

Responsibilities

• Evaluate cybersecurity hygiene, information security, IT applications, and related risks.
• Develop and execute risk-based Information Systems Audit Plans.
• Lead significant IS audit engagements and assess policy frameworks and their implementation.
• Evaluate the Bank’s cybersecurity environment against regulatory policies and frameworks.
• Validate audit exceptions identified through internal, external, and regulatory reviews.
• Manage audit resources, engagement schedules, budgets, and overall performance.
• Conduct IT and information systems audits to assess controls, reliability, integrity, and effectiveness.
• Discuss audit findings and develop workable management action plans.
• Provide consultancy to improve internal controls, workflows, procedures, risk management, and corporate governance.
• Stay updated on emerging cybersecurity, IT, audit, and regulatory trends.
• Provide training and guidance to reporting staff and internal clients.
• Ensure significant audit issues are properly reported, escalated, and followed up.
• Prepare periodic reports for the Chief Internal Auditor (CIA) and Board Audit Committee.
• Review engagement files and ensure proper documentation and archiving of audit working papers.

Skills

Audit planning

Risk assessment

IT controls

Cybersecurity awareness

Regulatory knowledge

Education

Bachelor's degree

HEC-recognized degree

IT/CS/Software Eng background

Job description

Bank of Punjab seeks an experienced professional for the Internal Audit Group – Information Systems Audit Division. You will evaluate cybersecurity hygiene, information security, and IT applications, and develop risk-based IS audit plans to strengthen controls.

You will lead major IS audit engagements, assess policy frameworks, and report findings to CIA and the Board Audit Committee. The role requires expertise in IT risk, regulatory alignment, and effective governance.