Manager, Internal Audit (IT and Information Security)

• Manage risk-based IT and Information Security audit engagements.
• Evaluate cybersecurity governance, security controls, and information security frameworks.
• Assess IT infrastructure, cloud environments, networks, databases, and critical applications.
• Review IT General Controls (ITGCs), application controls, identity and access management, change management, and disaster recovery processes.
• Evaluate compliance with regulatory requirements, industry standards, and internal policies.
• Identify control deficiencies, assess associated risks, and recommend practical remediation actions.
• Prepare and present audit findings and reports to senior management and relevant committees.
• Monitor and follow up on management action plans to ensure timely remediation of audit findings.
• Manage and mentor audit team members and ensure the quality and timely completion of audit engagements.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related discipline.
• Significant experience in IT Audit, Information Security Audit, IT Risk Management, or Cybersecurity Assurance.
• Professional certifications such as:
• CISA (Certified Information Systems Auditor) – preferred.
• CISM (Certified Information Security Manager).
• CISSP (Certified Information Systems Security Professional).
• CRISC (Certified in Risk and Information Systems Control).
• CIA (Certified Internal Auditor) with a focus on IT auditing.
• Strong knowledge of cybersecurity frameworks, IT governance, cloud technologies, and regulatory compliance requirements.