JOB SUMMARY

The incumbent will be responsible for directing and controlling the Information Systems Audits of computer based information systems, data processing centres, and telecommunications network of the First Citizens Group whilst providing management with assurance through consultation and recommendations that Risks are being effectively managed and that the organizational goals and objectives are being accomplished.

DUTIES AND RESPONSIBILITIES

• Develop a comprehensive and sustainable Internal Audit strategy for the area (Information Technology)
• Manage, plan, control and direct Audits via effective supervision of the resources under his/her charge.  Ensure the coverage for scoped Audit Assignments is adequate and support process improvements and effective risk management
• Conduct reviews of all new Information Systems (IS) and Functionality prior to implementation and provides guidance on Procedural and IS Security issues
• Guide the Audit Team during all Assignments, review completed Work-papers, Audit Files, and Reports for comprehensiveness and or improvements
• Perform IT Audit Management Action Plans (MAPs) follow-up process.  Maintain the MAPs Report with up-to-date information to be used for monthly reporting
• Prepare IS Audit monthly administrative updates and Reports as required, to the Manager Group Internal Audit
• Perform quality assessments for each Audit File upon completion to ensure auditing standards are maintained
• Direct and coordinate audits that require cross-functional audit teams or those of a complex/technical nature where necessary
• Implement, improve and maintain audit tools, specifically GIA’s automated Audit solution
• Manage human resources necessary for the efficient and professional operation of the company
• Conduct, execute and maintain the annual IT Audit Risk Assessment together with an updated IS Audit Universe through discussions with Executive and Senior Management and consider technology developments, legal and regulatory requirements, along with business and IS changes
• Provide guidance on Risks when necessary.  Serve on Group Project teams, review the development or change of business critical systems/processes, along with associated policies and procedures, and make recommendations for improving risk management and Projects process efficiency
• Conduct investigations on matters that are irregular and provide information to the Security Services Unit and Human Resources Department that dictate disciplinary action against employees who threaten the integrity of the Group’s information assets
• Conduct quality assurance reviews to ensure all IS audit work performed is in accordance with standard operating procedures and meets industry standards
• Assist in managing the budget and accounts for variances for the efficient and professional operation of the Unit
• Keep abreast with changes in the profession and the regulatory framework governing the operations of the institutions (internal and external) while ensuring that the programmes and audit manuals are always current and relevant
• Perform all other duties, assignments and special projects as assigned by the Board of Directors, Executive and Senior Management relative to the Function

 QUALIFICATIONS AND EXPERIENCE

• Bachelor’s degree in an IT related discipline from an accredited University or any other similar professional qualification/training from a recognized professional body in the IT field and three (3) years IT Auditing, Retail Banking Information Security or Business Consultancy or IT Advisory Services at which one (1) year must be at Supervisory of Managerial level or relevant combination of experience or qualifications OR
• An Executive Diploma/Diploma and five (5) years related experience in banking, at least two (2) of which must be at Managerial Level OR
• GMDP Certificate and seven (7) years related experience in banking, at least three (3) of which must be at Managerial level
• Certified Information Systems Auditor (CISA)
• Certifications:  Professional Certification in accounting (ACCA, CGA, CMA) or Certified Internal Auditor (CIA)
• In-depth knowledge of IT Governance and Control Frameworks, such as COBIT, ITIL
• Knowledge of Audit Command Language (ACL)
• Knowledge of Windows, Unix and Networking systems
• Information security accreditations such as CISM, CISSP, GIAC and Security will be a valuable asset
• Knowledge of laws, policies and contractual obligations regarding information technology, security and privacy
• Knowledge in Finance and Business Administration
• Working knowledge and understanding of the economic and general business environment, the banking and financial services industry as well as relevant legal and regulatory requirements both locally and regionally
• Proficiency in Microsoft Office Suite
• A basic understanding of how  to manage customer recovery / system recovery in system downtime
• Ability to diagnose electronic fraud typologies
• Strong Leadership and Managerial skills, strong problem solving, evaluation and analytical skills
• Strong communication and presentation skills
• Strong in negotiation
• Ability to maintain utmost confidentiality in all aspects of this position
• Ability to read, analyze, interpret and use complex documents and forms.

Applications are to be submitted on or before January 27, 2025.