Portfolio Audit Head, Technology / Digital & Data Analytics

Role Overview

Lead the Technology, Digital and Data Analytics audit portfolio, providing independent assurance on the effectiveness of IT controls, cybersecurity, risk management, governance, and regulatory compliance. The role also supports the Group Chief Internal Auditor in managing audit strategy, resources, and reporting to senior management and Board committees.

Key Responsibilities

• Develop and lead the annual audit plan for Technology, Digital, Data Analytics and Fintech-related areas.
• Oversee scheduled audits, special reviews, investigations, and other ad-hoc assignments.
• Evaluate IT systems, technology projects, cybersecurity controls, risk management, governance, and regulatory compliance.
• Review audit plans, audit findings, recommendations, and final reports before submission.
• Highlight significant control weaknesses, technology risks, fraud indicators, and regulatory issues to senior management and the relevant Board committee.
• Monitor the implementation and closure of audit recommendations.
• Maintain effective audit methodologies, programmes, tools, reporting standards, and quality assurance practices.
• Work closely with regulators, external auditors, senior management, and key internal stakeholders on audit-related matters.
• Manage the audit team's staffing, performance, professional development, succession planning, and technical capability.
• Monitor the audit portfolio's budget, resources, timelines, and delivery against the approved annual plan.

Candidate Requirements

Education

• Bachelor's degree, preferably in Computer Science, Information Technology, Accounting, or Business.
• A master's degree or recognised professional accounting qualification would also be suitable.

Professional Certifications

• Certification for Bank Auditors.
• Relevant technology or cybersecurity audit certification, such as:
• Certified Information Systems Auditor, CISA
• Cybersecurity Practitioner, CSXP

Experience

• More than 10 years of internal and/or external audit experience.
• At least 8 years of experience in a managerial capacity.
• Audit experience within financial institutions is essential.
• Strong knowledge of IT and cybersecurity risks and controls.

Key Skills

• Technology and cybersecurity audit
• Risk-based audit planning
• Internal controls and risk management
• Regulatory and legal compliance
• Audit reporting and issue management
• Stakeholder and regulator engagement
• Team leadership and people development
• Strong written and verbal communication
• Ability to influence and engage senior stakeholders