IT Auditor

Job Purpose

To perform complex technical audits of the Bank’s information systems, digital platforms, and IT infrastructure to identify vulnerabilities and ensure data Security, reliability integrity of digital assets and core banking applications.

Specific Duties and Responsibilities

• Engage in conducting technical audits of the Core Banking System (CBS), ERP, and peripheral applications.
• Perform vulnerability assessments on the Bank’s internal and external networks and firewalls.
• Review database access logs and configuration settings to prevent unauthorized data changes.
• Apply Computer Assisted Audit Techniques (CAATs) to extract and analyze large datasets for audit evidence.
• Assess the security and transaction integrity of Mobile Banking, Internet Banking, and ATM switches.
• Test the implementation of IT security policies, including password management and physical access controls.
• Audit server configurations (Windows/Linux) to ensure they are hardened against known exploits.
• Review the technical specifications and UAT (User Acceptance Testing) results for new software.
• Assist in the technical investigation of any attempted or successful system breaches.
• Verify that the IT functional organs have addressed findings from previous internal and external (NBE) IT audits.
• Draft detailed technical reports translating complex IT risks into business-impact language.
• Keep pace with new banking technologies, including mobile apps and API security.
• Generic Duties and Responsibilities
• Actively participate in developing, reviewing and implementing policies & procedures, plan /budget of the division;
• Mentor and enable staffs below his /grades towards achieving their effective performance;
• Demonstrate the Bank’s code of conduct; embody the bank’s good culture and corporate image to the public;
• Engage in teamwork, collaboration, and transparency work practices;
• Provide services as per the service level agreement;
• Contribute to the bank’s profitability as per the target set;
• Adhere to internal control system and risk management program of the Bank;
• Provide the concerned organ with timely, relevant, accurate, and complete reports on the plan performance;
• Implement timely corrective action on deficiencies and issues that have been raised or reported by different internal and external regulatory bodies
• Handle other related generic activities as deemed necessary

Qualification: BSc in Computer Science/Information Technology, or any other related fields

Experience: Three/3 years of relevant experience preferably in banking industry of which One/1 year on officer position.