Manager, Internal Audit (IT and Information Security)

Description

Manage risk-based IT and information security audit engagements.
Evaluate cybersecurity governance, security controls, and information security frameworks.
Assess IT infrastructure, cloud environments, networks, databases, and critical applications.
Review IT general controls (ITGCs), application controls, identity and access management, change management, and disaster recovery processes.
Evaluate compliance with regulatory requirements, industry standards, and internal policies.
Identify control deficiencies, assess associated risks, and recommend practical remediation actions.
Prepare and present audit findings and reports to senior management and relevant committees.
Monitor and follow up on management action plans to ensure timely remediation of audit findings.
Manage and mentor audit team members and ensure the quality and timely completion of audit engagements.

Requirements

Bachelor's degree in information systems, computer science, cybersecurity, or a related discipline.
Significant experience in IT audit, information security audit, IT risk management, or cybersecurity assurance.
Professional certifications such as:

• CISA (Certified Information Systems Auditor) – preferred.
• CISM (Certified Information Security Manager).
• CISSP (Certified Information Systems Security Professional).
• CRISC (Certified in Risk and Information Systems Control).
• CIA (Certified Internal Auditor) with a focus on IT auditing.

Strong knowledge of cybersecurity frameworks, IT governance, cloud technologies, and regulatory compliance requirements.