Job overview: The position will be responsible to carry to undertake both IT and Operations Audit. The person would be responsible for evaluating and assessing the organization’s IT systems, processes, and controls to ensure compliance, data integrity, and security. Additionally operational audit of some functional departments of the mortgage finance company would also be required to be carried out by the person. Candidate with experience in financial services industry would be preferred.

Qualifications:

• Bachelor’s or Master’s degree (16 years equivalent education) in information technology, Finance, Audit, Computer Science, or related field from HEC recognized institutions.
• Professional certification such as Certified Information Systems Auditor (CISA) or similar will be highly preferred.

Experience (Post Qualification):

Minimum 03 years of relevant experience

Age: Maximum 45 years (as of last date of submission of application)

Number of Vacancies: 01

Job Location: Karachi

Job Description:

• Undertake both IT and Operational Audits
• Develop full ownership of assigned audit portfolios and establish effective relationships with key personnel in these portfolios in order to stay abreast of changing and emerging risks.
• Develop and implement the IT audit plan: Collaborate with senior management and the internal audit team to develop a comprehensive IT audit plan that aligns with the organization’s objectives and risk profile. This includes identifying key areas for review, determining audit objectives and scope, and establishing appropriate audit methodologies and techniques.
• Conduct IT audits: Perform detailed assessments of IT systems, processes, and controls to evaluate their effectiveness, identify risks, and detect control deficiencies. This may involve reviewing documentation, conducting interviews, and performing testing of IT controls.
• Identify and communicate risks: Identify and communicate potential risks associated with the organization’s IT systems and processes. This includes evaluating the impact and likelihood of risks, assessing the adequacy of existing controls, and providing recommendations for risk mitigation.
• Provide recommendations for improvement: Based on audit findings, develop and communicate recommendations to address control deficiencies and improve IT processes. Collaborate with relevant stakeholders to implement remediation plans and monitor progress.
• Stay up-to-date with industry trends and best practices: Continuously enhance your knowledge of IT audit methodologies, emerging technologies, and industry regulations. Stay informed about IT related threats and trends to ensure the organization’s IT systems remain secure and compliant.
• Collaborate with stakeholders: Work closely with IT and business unit leaders to understand their needs and concerns, address any IT-related issues, and provide guidance on effective risk management and control practices.
• Audit reporting and documentation: Prepare clear, concise, and accurate audit reports documenting findings, recommendations, and management action plans. Ensure that all audit documentation is properly maintained and organized.
• Team management and development: If applicable, provide guidance and mentorship to junior members of the IT audit team. Foster a collaborative and supportive work environment, and assist in their professional development.
• Any other task as assigned by the line manager/Group Head – Internal Audit.

Skills & Competencies:

• Excellent communication, presentation & interpersonal skills
• Strong research writing & analytical skills
• Demonstrate strong ethical standards and integrity
• Familiarity with auditing widely used server, platform, database and end-point technologies
• Understanding of IT Governance and IT Risk Management concept
• Ability to work independently and manage multiple tasks simultaneously.
• Attention to detail and ability to maintain a high level of accuracy.
• Proficiency in audit software, data analytics, and Microsoft Office suite.
• Previous experience in IT auditing, information security, or risk management.
• Strong understanding of IT systems, networks, and cybersecurity principles.
• Knowledge of industry frameworks and standards (e.g., COBIT, ISO 27001, NIST).
• Familiarity with relevant laws and regulations (e.g., ETGRF, SBP Regulations).