Unit Head IT Applications Audit

HBL; Karachi Division; Sur place; PKR 2 500 000 - 4 500 000; Plein temps

Résumé du poste

Habib Bank Limited (HBL) is seeking a senior IT Audit professional in Karachi to lead audits across IT and banking operations. You will identify control gaps, assess governance and ensure remediation, data integrity, and compliance with security standards.

The role requires extensive audit experience in the banking sector, strong data analytics, and the ability to translate findings into business risk actions. Collaboration with management and adherence to bank policies are essential.

Qualifications

• Bachelor’s degree in computer science or comparable field.
• CISA certification is preferred.
• Minimum 12 years of audit experience, software development assurance or technology risk, preferably in Banking.

Responsabilités

• Identify high-risk IT areas following Audit Procedure Manual.
• Lead audits across IT and operations to identify control gaps and remediation needs.
• Assess project governance, risk assessments and control design for implementations.
• Evaluate data migration strategies, system configuration controls and regulatory alignment.
• Plan audits and reporting per Information Security/IT Policies and standards.
• Evaluate application controls, including authentication, authorization and data integrity.
• Finalize reports after management discussions and reviews.
• Oversee team workload and ensure efficient use of resources.
• Interact with CBS modules such as onboarding, deposits, loans, payments and GL.

Connaissances

Audit experience

Data analytics

Risk assessment

Stakeholder management

Formation

Bachelor’s degree in computer science or comparable field

CISA certification preferred

Description du poste

Identification of high-risk areas in IT in accordance with the Risk Assessment criteria defined in Audit Procedure Manual.

Lead audits across operational and IT domains to identify control gaps and recommend remediation measures. Ensure timely completion of audit fieldwork and reporting.

Conduct post-implementation reviews to assess project governance, risk assessments, and control design, perform audit on the implementation projects to ensure embedded control requirements audits to validate control effectiveness and data integrity.

Ensure and evaluate business requirement mapping, data migration strategies, system configuration controls and align with regulatory, operational, and security requirements.

Ensure planning of audit / special review assignments, audit testing and reporting are in accordance with Information Security/IT Policies, applicable standards, best practices and controls frameworks.

Assess design and operating effectiveness of application controls including authentication and authorization, segregation of duties, transaction processing, input/output validation, reconciliation, exception handling, and data integrity controls.

Finalization of reports, including discussion with management and formal release after due reviews.

Execution of audits / special reviews by utilizing the available resources in efficient manner.

Assists in preparation of risk-based work program for the audit engagement

Adhere to IA policies and procedures, including maintaining quality of work, documentation and record management.

Other Reviews / Tasks

Conduct a review for Core Banking System (CBS) implementation including review of IT Controls.

Carry out special audits, reviews or other tasks as may be directed by management.

Internal Relations

Stakeholder management with respect to audits/ special reviews.

Maintain open communication with management with reference to ongoing engagements and other pertinent matters.

Strong people management, audit methodology, test design and scripting, data analytics, stakeholder management, persuasive reporting, and ability to translate technical findings into business risk.

Continuous research and learning to gain industry wide knowledge and best market practices to build new audit techniques and make recommendations for improvements to IA systems, reporting etc.

Stay up to date with best practices, rules and regulations impacting financial institutions and ensuring that the changes are incorporated into the independent assessment process.

Contribute to professional development of the team by providing guidance regarding industry best practices andinstruct them on risks and compliance areas in relation to policies, procedures of the bank and applicable regulations.

Understanding project phases: initiation, planning, design, development, testing, deployment, post-go live. Familiarity with CBS modules: customer onboarding, deposits, loans, payments, GL, treasury, etc.

Team Management

Oversee the operational workload of team to ensure that allocated staff are fully utilized to achieve agreed program of work.

Advise and instruct team members relating to risk and compliance policies relevant to work area to ensure business is not exposed to undue risk

Display mutual respect within the team as well as with peers, associates and supervisors to deliver quality output.

Qualifications

Bachelor’s degree in computer science or comparable field preferably CISA certified.

12 years of audit experience, software development assurance or technology risk preferably in Banking industry.

Job Info

• Job Identification 30231
• Posting Date 10/14/2026, 07:52 AM
• Apply Before 10/26/2026, 06:59 PM
• Locations Habib Bank Plaza, Karachi, Sindh, PK