Audit Manager, Techonology & Cyber Security
Kuwait Finance House - Egypt · Bahrain
KEY RESPONSIBILITIES:
Audit Planning & Risk Assessment:
- Participate in the annual Technology & Cyber Security risk assessment and audit planning processes.
- Identify key technology and cybersecurity risks across infrastructure, applications, digital channels, and IT operations.
- Recommend audit priorities based on risk exposure, incidents, regulatory updates, and emerging threats
Audit Execution & Fieldwork:
- Execute end‑to‑end IT and cyber-security audits in line with the approved audit plan, methodology, and allocated time budgets.
- Assess the design and operating effectiveness of IT and cybersecurity control areas, including IT general controls, application controls, cybersecurity controls, and technology governance processes.
- Benchmark compliance against relevant IT and cybersecurity standards, frameworks, laws, and regulations.
- Leverage data analytics and automated techniques to enhance audit efficiency, accuracy, and coverage
Reporting & Stakeholder Management:
- Prepare high‑quality audit reports that clearly present findings, associated risks, root causes, and practical recommendations in accordance with the approved methodology.
- Conduct meetings with audit clients to ensure effective communication throughout the audit lifecycle.
- Present audit results to senior management and relevant committees as required.
Maintain strong, professional relationships with Technology, Cyber Security, Risk, and Business stakeholders while preserving audit independence.
Follow-Up, Issue Tracking, and Validation:
- Monitor the remediation of audit findings and validate the closure of open issues in accordance with the audit manual.
- Ensure timely follow‑up and escalate delays that expose the bank to unacceptable levels of risk.
Quality Assurance & Methodology:
- Maintain detailed, high‑quality working papers that comply with the approved audit methodology.
- Ensure audit engagements are executed in a manner that upholds audit quality while fostering positive client relationship and maintaining professional independence.
- Contribute to the continuous enhancement of Internal Audit processes, templates, and the adoption of digital audit tools and technology-driven improvements.
Advisory, Training & Development:
- Serve as a subject‑matter expert on digital transformation, cloud technologies, fintech, data analytics, AI/ML controls, and relevant IT regulatory requirements.
- Conduct ad‑hoc audit assignments or investigations as directed by the Audit Committee or the Head of Audit.
- Provide advisory support while maintaining strict adherence to audit independence.
- Maintain up‑to‑date professional knowledge and continuing professional development (CPD), particularly on regulatory, legislative, and emerging risk and control developments relevant to the bank’s activities.
- Act as a champion for the audit management software and other audit and data analytics tools.
- Complete all mandatory and assigned training programs within the stipulated timelines, ensuring full compliance with Internal Audit and bank-wide learning requirements.
QUALIFICATIONS & EXPERIENCE
Academic Qualifications (Minimum Requirement):
- Bachelor’s degree in Information Technology, Computer Science, Cyber Security, or related field.
- Master’s degree preferred.
Professional Certifications (Minimum Requirement / Preferred):
- Certified Information Systems Auditor (CISA) is required
- CIA, CISM, CISSP, CFE, CRSIC, CGEIT, ACCA, CPA, CFA, Cloud (AWS/Azure), or similar is preferred.
Minimum Experience:
- 6 years or more technology and cyber security experience, including a minimum of 3 years IT auditing experience in financial services or related industry.