Job Purpose:
The Manager, Technology Audit supports the Head and Senior Manager of Technology Audit in strengthening internal controls, risk management, and governance across MBSB Group's technology functions. The role focuses on planning and performing risk-based audits, supervising audit fieldwork, and providing assurance to Management on key technology risks and controls. The Manager is responsible for delivering high-quality audit assignments, guiding and developing team members, and ensuring compliance with GIAD standards, while escalating significant findings and emerging issues to senior audit leadership.
Key Responsibilities:
Group Functions:
- Support the Head and Senior Manager of Technology Audit in implementing the Group Technology Audit strategy, ensuring audit engagements across MBSB Bank and MIDF follow GIAD's risk management framework, policies, and professional standards.
- Plan and execute technology audit assignments and guiding team members to ensure audit objectives are achieved within agreed timelines.
- Review audit working papers to ensure accuracy, completeness, and compliance with the GIAD Manual, International Standards for Internal Auditing, and regulatory requirements.
- Coordinate with divisional and departmental stakeholders to facilitate audit processes, build cooperative working relationships, and provide accurate information for audits.
- Contribute to knowledge sharing by adopting best practices and using data analytics or audit tools to improve audit efficiency and consistency.
Planning & Execution:
- Plan and execute audits under the approved Annual Audit Plan (Technology), ensuring objectives are achieved within agreed timelines.
- Conduct risk assessments on core systems, applications, outsourcing arrangements, and IT operations to identify vulnerabilities and areas requiring audit focus.
- Supervise audit fieldwork, review working papers, and ensure audit methodology is applied consistently and accurately.
- Carry out audit fieldwork in line with approved methodology, ensuring accuracy, completeness, and proper documentation of testing results.
- Participate in investigative audits and ad-hoc reviews as directed by Management, providing factual and objective findings.
Audit Reporting, Gap Identification & Follow-up:
- Review and validate audit findings prepared by Executives/Senior Executives to ensure accuracy, clarity, and proper documentation.
- Prepare comprehensive, evidence-based audit reports that clearly highlight risks, control gaps, and practical recommendations.
- Communicate audit observations to divisional and departmental management to facilitate corrective actions and strengthen accountability.
- Track and monitor follow-up actions to ensure timely resolution of audit issues, escalating delays or concerns where necessary.
- Support the Head and Senior Manager of Technology Audit by providing input for management updates and reporting requirements.
Requirements:
Qualifications
- Bachelor's degree in Information Technology or related field.
- Professional certification such as CISA, CISM, CISSP (preferred).
- Technical knowledge in IT security, systems development, or cybersecurity testing is an advantage.
Experience
- Minimum 6–8 years of experience in Technology Audit or related IT risk functions, preferably within banks/DFIs.
Skills/Competency
- Strong understanding of IT governance, regulatory requirements, and technology risk in financial institutions.
- Proficiency in risk-based auditing and internal control frameworks.
- Excellent communication, report-writing, and interpersonal skills to interact with stakeholders at various levels.
- Demonstrated leadership and ability to manage multiple audit engagements simultaneously.
- Strong analytical, critical-thinking, and problem-solving skills, with the ability to recommend practical solutions.
- Knowledge in related BNM's guidelines and requirements as well as from other regulatory bodies. Knowledge in Project Management, Information Systems Audit and IT related fieldwork, i.e. IT security, System Development Life Cycle (SDLC), IT Application, Disaster Recovery Plan (DRP) etc.
- Knowledge in IT governance standards and best practices for IT environment such as ISO 27001: Information Security Management System (ISMS), Control Objectives for Information and Related Technologies (COBIT), Information Technology Infrastructure Library (ITIL) etc.
