Senior Digital Auditor, Cybersecurity Audit, Group Audit

Roles & Responsibilities

The Cybersecurity Audit CoE – Senior Digital Enabler/Auditor played a critical role in advancing the mandate to provide high-quality assurance over cybersecurity controls and risks across the Bank. In addition to executing cybersecurity audit engagements, the role supported the CoE's transformation towards an AI-enabled, data-driven, and digitally enhanced audit function.

The incumbent leveraged AI, machine learning, analytics, and automation tools to deliver deeper insights, enhance audit efficiency, strengthen continuous monitoring, and uplift the overall digital capability of the CoE. This ensured that auditors were able to focus on higher-value, judgement-driven areas aligned with emerging technologies and risks.

A. Cybersecurity Audit Delivery

• Plan and execute cybersecurity audit engagements in accordance with Group Audit methodology and professional standards.
• Assess the architecture, implementation, and operational effectiveness of advanced cybersecurity controls, including privileged access and identity lifecycle management, network micro-segmentation and endpoint protection strategies, cloud-native and AI/ML system security, SIEM and log analytics, vulnerability scanning and patch management processes, and detection, response, and remediation workflows for complex incidents.
• Evaluate cybersecurity controls over AI systems, including access management, secure model deployment, data protection and integrity, resilience against adversarial attacks, threat detection, vulnerability management, and secure AI lifecycle governance.
• Perform both automated and manual audit tests, leveraging digital tools, analytics, and scripts where relevant.
• Document audit workpapers, testing results, issues, and recommendations clearly and accurately.
• Communicate audit observations to stakeholders, ensuring clarity, accuracy, and relevance to risk owners.
• Support follow-ups on remediation actions to confirm progress and closure.

B. Digital Enablement & Transformation

• Design, develop, and implement automation scripts, analytics routines, dashboards, and AI-enabled tools to support audit testing, continuous monitoring, and assurance activities.
• Introduce and operationalise the use of AI, machine learning, or large language model (LLM) tools, such as TensorFlow, LangChain, LangGraph, agentic workflows, and other emerging technologies, where appropriate for audit purposes.
• Build reusable digital audit assets (e.g., data pipelines, anomaly-detection models, automated control-testing functions) to enhance the productivity and coverage of the CoE.
• Provide technical guidance to auditors on the use of digital tools, data analytics, and AI-enabled solutions during audit assignments.
• Champion digital transformation initiatives within the CoE, promoting the effective adoption of automation, analytics, and AI-based capabilities across auditors

Job Requirements:

• Degree in Cybersecurity, Data Science, or a related field.
• Experience in IT audit, cybersecurity operations, AI & cloud security, or related assurance.
• Strong knowledge of cybersecurity domains and control frameworks (e.g., NIST Cybersecurity Framework, COBIT).
• Proficiency in scripting or programming (e.g., Python), with demonstrated ability to automate tests or perform data analysis.
• Ability to analyse complex technology environments, interpret logs/data, and identify control weaknesses.
• Strong communication, problem-solving, and critical-thinking
• Experience designing or implementing audit automation, continuous monitoring, or data-driven test scripts.
• Exposure to AI/ML tools, LLM orchestration frameworks, or automation tooling (e.g., TensorFlow, PyTorch, LangChain, LangGraph, agentic frameworks, or similar).
• Familiarity with data analytics platforms, cloud environments, or big-data pipelines.
• Understanding of AI, MLOps, model governance, explainability, or AI risk management.
• Professional certifications, such as CISA, CISSP, CCSP, AAIA, AAIR, AAISM, or relevant cloud/AI certifications.