About the job
As an IT & GRC Auditor at hugobank, you will play a crucial role in enhancing the Bank’s technology risk management, cybersecurity, and governance framework. Your responsibilities will include executing risk-based IT audits, evaluating internal controls, and ensuring compliance with regulatory, data protection, and information security standards across various platforms including digital banking systems and cloud environments.
Key Responsibilities
- Develop and maintain a comprehensive IT & Information Security audit universe, ensuring thorough coverage of technology risks throughout the Bank.
- Conduct periodic risk assessments and formulate risk-based audit plans, focusing on high-risk and regulatory-critical sectors.
- Lead and conduct end-to-end IT and GRC audits covering areas such as cybersecurity, digital banking platforms, application controls, IT infrastructure, cloud environments, and third-party/vendor risk management, in accordance with the established audit methodology and Internal Auditing Standards.
- Assess the effectiveness of IT governance, policies, processes, and internal control frameworks; identify control deficiencies and offer actionable, risk-based recommendations.
- Evaluate adherence to Central Bank regulations, relevant legal standards, industry benchmarks, and internal governance frameworks related to technology and information security.
- Prepare high-quality audit documentation and reports that are clear, concise, objective, and timely, ensuring that audit engagements are completed within the stipulated timelines and resource allocations.
- Monitor and report on the progress of audit findings and management action plans, including tracking overdue items and conducting follow-up reviews to verify remediation effectiveness.
- Conduct special reviews, investigations, and advisory and assurance assignments as directed by the Chief Audit Executive.