IS Auditor - Team Lead at AB Microfinance Bank

Job Description

• Assessing, validating, and evaluating the Institutions Information System’s processes, people, and technologies; by identifying and appraising risks in the IT processes while recommending solutions to potential and actual security vulnerabilities.

Role Description
Functionally reporting to IT Audit Berlin, and HoD Internal Audit ABN:

• Oversee high standards of reporting quality, delivery, and standardization.
• Active management and direct responsibility of team activities during field work
• Coordination of Audit Assignments, Continuous control monitoring and spot checks within banks
• Direct coordination of the team performances - working hours, task recorder.
• Active coordination of knowledge and skill building of the team. – training and skill development
• Consolidation and secured management of all IT auditor and auditee information

Key Responsibilities
Pre-Audit Responsibilities:

• Proactive alignment with the IT audit scope and annual auditing cycles and plans.
• Preparation and review of pre audit documentation

Auditing Responsibilities:

• Perform full risk and compliance audit reviews, over controls related to effectiveness, efficiency, and Security of IT operations, using applicable standards and regulations.
• Evaluate control environment as it relates to emerging information technology
• Obtain, analyze, and evaluate documentation, reports, data, flowcharts etc. for IT processes such as system development, IT security management and IT operations.
• Ensure that IT Audits are performed in line with established professional and regulatory standards.Create and undertake IT-business audit risk assessments; develop and execute IT audits within specified implementation duration; discuss results with Management and provides guidance on control issues and concerns.

Post Audit Responsibilities:

• Prepare and present findings to the Management and Stakeholders of the Auditee, prepare IT Audit reports and IT Audit processes & procedures.
• Adequately document and summarize findings, recommendations, and action plans in an audit report; reaches consensus on findings and recommendations with IT and business management; presents reports to audit management, business management and the Audit Committee.
• Prepares and submits requested documentation and reports for external audits and regulatory examinations.
• Ensure that management responses are received in a timely fashion, and are in line with recommendations, and have a reasonable estimated completion date.

Consultation Responsibilities:

• Performs follow-up consultation on resolution of key issues
• Serve as a department resource for questions and guidance on technical matters; extracts and provides data to other auditors for analysis.

Necessary Experience, Skills, Knowledge and Technical Proficiency

• Minimum educational qualification: B.Sc / HND in any related discipline with cognate experience
• General IT work experience of 7 years with 5 years minimum working experience as IT Auditor
• Good Knowledge in Application maintenance and user management
  • Advanced Knowledge in Programming languages: Java, C++, Visual Basic, .NET and or PHP.
  • Composite knowledge in mobile application development and deployment
  • Adequate understanding of SDLC and Software TIP-TIM (Transfer into Production), (Transfer into Maintenance)
  • Basic understanding of AGILE and SCRUM approach
• Proficiency in Database Security Administration for front end and back end (MS SQL, MySQL etc.)
  • Knowledge in DB Authentication, Access management, vulnerability assessment and
  • Knowledge in DB
  • Logging, administration
• Advanced Knowledge in infrastructure review: Operating System and Networking security
  • Audit experience and high technological proficiency in Microsoft packages: Active directory, LAPS, Microsoft Azure, SharePoint, Exchange, virtualization etc.
  • Advanced Knowledge in Network Security Architecture, Administration of Routing, Switching, Firewalling and Network Access Control devices.
• Advanced skill in Network Logging, Monitoring, Analysis and Troubleshooting.