Head, Information Systems Audit

Key Responsibilities:

Responsible for the following:

1. Execution of IS audit assignments in the audit plan including:
2. Ensure audit assignments are carried out in accordance with the GIA Audit Procedures Manual including, but not limited to, supervising, guiding and monitoring all aspects of the audit assignment execution and reporting to ensure they are carried out professionally and in a timely manner, and with proficiency and due professional care.
3. Ensure results of the audit assignments are effectively and timely communicated to the GCIA, and once GCIA has completed the review, to all relevant stakeholders by way of a written report.
4. Ensure timely and accurate tracking of all outstanding audit findings from audit assignments, including those raised by regulators and external auditors, until resolution.
5. Personally lead and perform audit work on complex or specialised areas, including core banking, cloud, cybersecurity and artificial intelligence related applications, where required.
6. IS audit assignment / resource tracking / monitoring;
7. Mentoring and guiding auditors on IS audit;
8. Development and execution of the analytics plan; and
9. Driving the implementation and adoption of systems and technology within Group Internal Audit, including audit management systems, data analytics, automation and artificial intelligence solutions, from requirements gathering and deployment to continuous enhancement.

In addition, to assist the GCIA in any areas as directed including the following:

1. Audit planning process – annual and mid-year review especially for IS audits;
2. Execution of other audit assignments or non-audit related activities;
3. IS audit staff management – from development plans to performance management (KPI achievements); and
4. Assessment of emerging technology and artificial intelligence developments, and their implications on the Group's risk profile and the IS audit plan.

Other responsibilities include but not limited to:

1. To represent GIA in Committee meetings, where required.
2. To maintain professional relationships and when required, business partner relationship with other Group divisions especially with Group Digital and Information.
3. To participate in key system implementation projects / committees as observers or in an advisory / consultative capacity, providing input and independent views on risks and controls during project and committee meetings, including for initiatives involving new technology and artificial intelligence.
4. To keep abreast of developments in technology and artificial intelligence, and to promote their practical application in the delivery of audit work.

Skills

1. Organisational Awareness
2. Strategic Thinking
3. Leadership
4. Planning & Organisation
5. Analytical & Problem Solving
6. Decision Making
7. Digital Fluency & Technology Adoption

Knowledge

1. Industry awareness / knowledge of banking, legal and regulatory requirements, leading practices and framework for risk management, internal auditing – including risk-based auditing and corporate governance.
2. Relevant tertiary or professional certification knowledge in audit/assurance.
3. Risk management framework and processes.
4. Best practices of audit techniques and up to-date audit practices including that of management audit.
5. Domain knowledge in analytics, familiarity in robotic process automation and artificial intelligence, including their practical application in the audit process and the risks and controls associated with their use.

Experience

1. Degree or good knowledge in related discipline.
2. At least 10 years of relevant auditing experience including 5 years of relevant experiences in a supervisory role.
3. Sufficiently experienced in auditing systems to perform IS audit assignments independently with exposure to systems implementation or deployment initiatives.
4. Preferable with a recognised certification such as CISA, CISM, CBA, CIA, Chartered Banker, CISSP, or equivalents.