Associate Mgr., Information & Communication Technology Audit
2w ago
Free account needed to apply or save. It takes a minute, and we'll bring you right back to this job.
Skills
About the role
1) Perform end-to-end audits in IT, Information Security, and Cloud Security from initiation / risk assessment, planning, development of work program and execution, and reporting.
2) Identify potential risks in AD, DC, DNS, Hypervisor, Virtualization platform, Container based technology and databases.
3) Ability to write and execute SQL queries independently against production databases (Oracle, SQL Server, MySQL/PostgreSQL)
4) Identify potential risks related to data security, IT processes, and compliance with regulatory requirements and industry standards.
5) Plan and design audit procedures and strategies based on the organization's specific needs and objectives.
6) Conduct audits of IT systems, applications, and processes to assess their effectiveness, security, and compliance.
7) Maintain detailed records of audit findings, including vulnerabilities, weaknesses, and recommendations.
8) Ensure that the organization's IT practices adhere to relevant laws, regulations, and industry standards (e.g., BB ICT and Cloud Guidelines, ISO 27001, PCI DSS).
9) Provide recommendations and action plans to address identified vulnerabilities and improve IT security and efficiency.
10) Communicate audit findings and recommendations to relevant stakeholders, including management and IT teams.
11) Stay updated on emerging threats, technologies, and industry best practices to enhance the organization's cybersecurity posture continually.
12) Keeping updated about banking knowledge, BB guidelines, circulars, auditing standards, changing/ amendment of law/regulations etc.
13) Adequately analyze, assess, and evaluate the risk of IT and Information security systems and applications.
14) Conduct data analysis using suitable Computer-Assisted Audit Technique (CAAT).
1) Perform end-to-end audits in IT, Information Security, and Cloud Security from initiation / risk assessment, planning, development of work program and execution, and reporting.
2) Identify potential risks in AD, DC, DNS, Hypervisor, Virtualization platform, Container based technology and databases.
3) Ability to write and execute SQL queries independently against production databases (Oracle, SQL Server, MySQL/PostgreSQL)
4) Identify potential risks related to data security, IT processes, and compliance with regulatory requirements and industry standards.
5) Plan and design audit procedures and strategies based on the organization's specific needs and objectives.
6) Conduct audits of IT systems, applications, and processes to assess their effectiveness, security, and compliance.
7) Maintain detailed records of audit findings, including vulnerabilities, weaknesses, and recommendations.
8) Ensure that the organization's IT practices adhere to relevant laws, regulations, and industry standards (e.g., BB ICT and Cloud Guidelines, ISO 27001, PCI DSS).
9) Provide recommendations and action plans to address identified vulnerabilities and improve IT security and efficiency.
10) Communicate audit findings and recommendations to relevant stakeholders, including management and IT teams.
11) Stay updated on emerging threats, technologies, and industry best practices to enhance the organization's cybersecurity posture continually.
12) Keeping updated about banking knowledge, BB guidelines, circulars, auditing standards, changing/ amendment of law/regulations etc.
13) Adequately analyze, assess, and evaluate the risk of IT and Information security systems and applications.
14) Conduct data analysis using suitable Computer-Assisted Audit Technique (CAAT).
· Master/bachelor’s degree from a reputed university