Unit Head IT Applications Audit

HBL People; Pakistan; On-site; PKR 3,000,000 - 5,400,000; Full time

Job summary

Habib Bank Limited is seeking a seasoned IT Audit professional to lead risk-based audits across IT and banking operations. The role emphasizes identifying control gaps, ensuring remediation, and delivering timely fieldwork and reporting.

The ideal candidate has 12 years in banking IT audits or technology risk, with CISA certification preferred and strong data analytics, stakeholder management and reporting skills. This on‑site position is based at Habib Bank Plaza in Karachi.

Qualifications

• Bachelor’s degree in computer science or a related field; CISA certification preferred.
• 12 years of audit experience, software development assurance or technology risk in banking.
• Strong understanding of IT controls and risk management within financial institutions.

Responsibilities

• Identify high‑risk IT areas using Audit Procedure Manual criteria and lead fieldwork.
• Audit across operational and IT domains, report findings and remediation actions.
• Review project governance, risk assessments and control design post‑implementation.
• Evaluate data migration, system configurations and compliance with regulatory standards.
• Plan audits, perform testing, and document results in alignment with policies.
• Assess application controls, authentication, authorization, and data integrity.
• Finalize reports after managing reviews with management and stakeholders.
• Supervise audit resources and assist in risk‑based work program development.
• Mentor team on industry best practices and regulatory compliance.

Skills

Audit methodology

Test design

Data analytics

Stakeholder management

Persuasive reporting

People management

Risk translation

Education

Bachelor’s degree in computer science or comparable field

CISA certified

Job description

Identification of high-risk areas in IT in accordance with the Risk Assessment criteria defined in Audit Procedure Manual.

Lead audits across operational and IT domains to identify control gaps and recommend remediation measures. Ensure timely completion of audit fieldwork and reporting.

Conduct post-implementation reviews to assess project governance, risk assessments, and control design, perform audit on the implementation projects to ensure embedded control requirements audits to validate control effectiveness and data integrity.

Ensure and evaluate business requirement mapping, data migration strategies, system configuration controls and align with regulatory, operational, and security requirements.

Ensure planning of audit / special review assignments, audit testing and reporting are in accordance with Information Security/IT Policies, applicable standards, best practices and controls frameworks.

Assess design and operating effectiveness of application controls including authentication and authorization, segregation of duties, transaction processing, input/output validation, reconciliation, exception handling, and data integrity controls.

Finalization of reports, including discussion with management and formal release after due reviews.

Execution of audits / special reviews by utilizing the available resources in efficient manner.

Assists in preparation of risk-based work program for the audit engagement

Adhere to IA policies and procedures, including maintaining quality of work, documentation and record management.

Other Reviews / Tasks

Conduct a review for Core Banking System (CBS) implementation including review of IT Controls.

Carry out special audits, reviews or other tasks as may be directed by management.

Internal Relations

Stakeholder management with respect to audits/ special reviews.

Maintain open communication with management with reference to ongoing engagements and other pertinent matters.

Strong people management, audit methodology, test design and scripting, data analytics, stakeholder management, persuasive reporting, and ability to translate technical findings into business risk.

Continuous research and learning to gain industry wide knowledge and best market practices to build new audit techniques and make recommendations for improvements to IA systems, reporting etc.

Stay up to date with best practices, rules and regulations impacting financial institutions and ensuring that the changes are incorporated into the independent assessment process.

Contribute to professional development of the team by providing guidance regarding industry best practices andinstruct them on risks and compliance areas in relation to policies, procedures of the bank and applicable regulations.

Understanding project phases: initiation, planning, design, development, testing, deployment, post-go live. Familiarity with CBS modules: customer onboarding, deposits, loans, payments, GL, treasury, etc.

Team Management

Oversee the operational workload of team to ensure that allocated staff are fully utilized to achieve agreed program of work.

Advise and instruct team members relating to risk and compliance policies relevant to work area to ensure business is not exposed to undue risk

Display mutual respect within the team as well as with peers, associates and supervisors to deliver quality output.

Qualifications

Bachelor’s degree in computer science or comparable field preferably CISA certified.

12 years of audit experience, software development assurance or technology risk preferably in Banking industry.

Job Info

• Job Identification 30231
• Posting Date 10/14/2026, 07:52 AM
• Apply Before 10/26/2026, 06:59 PM
• Locations Habib Bank Plaza, Karachi, Sindh, PK