Senior IS Auditor - Development & Application Proficiency at AB Microfinance Bank

Key Responsibilities
Pre-Audit Responsibilities:

• Proactive alignment with the IT audit scope and annual auditing cycles and plans.
• Preparation and review of pre audit documentation

Auditing Responsibilities:

• Perform full risk and compliance audit reviews, over controls related to effectiveness, efficiency and Security of IT operations'; using applicable standards and regulations.
• Evaluate control environment as it relates to emerging information technology trends (cloud computing, social media, BYOD, etc.)
• Evaluate information system design and implementation processes against project management and system development life cycles
• Obtain, analyze and evaluate documentation, reports, data, flowcharts etc. for IT processes such as system development, IT security management and IT operations.
• Ensure that IT Audits are performed in line with established professional and regulatory standards.
• Create and undertake IT-business audit risk assessments; develop and execute IT audits within specified implementation duration; discuss results with Management and provides guidance on control issues and concerns.

Post Audit Responsibilities:

• Prepare and present findings to the Management and Stakeholders of the Auditee, prepare IT Audit reports and IT Audit processes & procedures.
• Adequately document and summarize findings, recommendations and action plans in an audit report; reaches consensus on findings and recommendations with IT and business management; presents reports to audit management, business management and the Audit Committee.
• Prepares and submits requested documentation and reports for external audits and regulatory examinations.
• Ensure that management responses are received in a timely fashion, and are in line with recommendations, and have a reasonable estimated completion date.

Consultation Responsibilities:

• Performs follow-up consultation on resolution of key issues
• Serve as a department resource for questions and guidance on technical matters; extracts and provides data to other auditors for analysis.

Profile Competencies Required
General working Proficiencies:

• Working knowledge of industry recognized auditing standards, such as Institute of Internal Auditors (IIA) Standards and Guidelines and ISACA IS Audit and Assurance Standards and Guidelines. (IIA; ISACA; ISO 27001).
• High degree of process understanding as well as profound knowledge / willingness to develop in the areas of Banking and finance products, digital finance and digital channel management
• Insight into Banking laws and are willing to become acquainted with local specific Banking laws, standard banking requirements as well as IT banking systems.
• Basic understanding in project management and organization skills with high attention to detail.
• Inquisitive, critical thinker with business risk awareness, professional skepticism, and sound judgment.
• Ability to research, assimilate information from both IT and business functions, apply strong problem solving and analytical skills, and influence issue resolution.
• Good communication and interaction capability (Excellent written and verbal communication, interviewing, and presentation skills - proficiency in English)
• Willingness to travel up to 50% to Audit locations outside Nigeria

Technical Proficiency - Development and programming:

• Advanced Knowledge in Programming languages: Java, C++, Visual Basic, .NET and or PHP.
• Composite knowledge in mobile application development and deployment
• Adequate understanding of SDLC and Software TIP-TIM (Transfer into Production), (Transfer into Maintenance)
• Basic understanding of AGILE and SCRUM approach

Technical Proficiency - Application Management:

• Basic Knowledge in Application maintenance and user management
• Audit experience and high technological proficiency in front end and back end Authentication, Access management, vulnerability assessment and application Logging.
• Composite Knowledge in Linux operating environments; understanding of application setup and installation basics.

Profile Competencies Required:

• Working knowledge of industry recognized auditing standards, such as Institute of Internal Auditors (IIA) Standards and Guidelines and ISACA IS Audit and Assurance Standards and Guidelines. (IIA; ISACA; ISO 27001).
• High degree of process understanding as well as profound knowledge / willingness to develop in the areas of Banking and finance products, digital finance and digital channel management
• Advanced Knowledge in Programming languages: Java, C++, Visual Basic, .NET and or PHP.
• Composite knowledge in mobile application development and deployment
• Adequate understanding of SDLC and Software TIP-TIM (Transfer into Production), (Transfer into Maintenance)
• Basic understanding of AGILE and SCRUM approach.