VP & Head of Audit, Information Security

operating procedures and policy.

▪ Promote the organization’s values and ethics in all activities within the team to support the establishment of a

value driven culture within the bank.

Budgeting and Financial Performance

▪ Monitor the financial performance of given areas of activities versus budgets and ensure all activities are carried

out in line with the approved guidelines while promptly reporting on any variances to management.

Policies, Systems, Processes & Procedures

▪ Execute to established GIA Policies, Guidance Notes, Procedures and Practice Notes in undertaking all tasks.

Provide input to the development of GIA practices as per industry standards and regulatory expectations.

▪ Review all the activities of the Units within Information Security, Technology, Data Domain and System

Integration related activities in all the jurisdictions in which the groups operate to define and maintain the Audit

Universe. Coordinate with other teams to ensure efficient and effective coverage.

▪ Prepare and maintain a Risk Assessment of each of the Process Streams within Information Security, Technology,

Data Domain and System Integration related Units and applicable subsidiaries (e.g. international entity) as

identified in the Audit Universe. In this respect, work with the businesses to promote periodic self-assessment of

risks and controls.

▪ Establish/update and maintain Audit programs in the central audit management tool.

▪ Conduct audits of the Processes within Information Security, Technology, Data Domain and System Integration

related activities and assess if:

o Divisional/Unit Line management have identified and classified the risks in their activities.

o Governance, risk management and control procedures are adequate, effective and efficient to reduce risks

of errors, omissions and loss to acceptable levels at an acceptable cost.

o Improvements/enhancements to the governance, risk management and internal control structure are

required.

o Data and transaction processing meet the required standards of reliability, integrity and availability.

o The Division’s/Unit’s assets are being safeguarded.

o The use of resources is efficient and effective.

o Draft audit report submitted by auditors are properly reviewed and finalized.

o Audit report is discussed and finalized with GIA management/client within 6 weeks of completion of

fieldwork. Negotiate with Unit management to agree a documented Management Action Plan to resolve

the issues raised.

Continuous Improvement

▪ Lead the identification of change through continuous improvement of processes and practices considering global

standards and changes in the business environment which demand proactive action plans.

Relationship Management

▪ Develop and maintain effective business relationships with all relevant external/internal entities and stakeholders

with the highest standards of business ethics, whilst promptly attending to all critical issues in-order to ensure

the services required by the organization are delivered in the most effective manner.

▪ Act as the Audit Business Partner for Line Managers within Information Security, Technology, Data Domain and

System Integration Functions and actively manage the relationship through regular meetings with Line Managers

to promote this concept and identify emerging risks. Such meetings should also be used to discuss any material

gaps between audit assessment or risks and controls and the businesses’ self-assessment.

▪ Ongoing consultancy/advice is provided to Unit management from a governance, risk management and control

perspective for improvements in their processes to ensure effective and efficient controls, on the basis of market

best practices.

▪ On an ongoing basis, ensure pending audit issues are followed up with Unit management and that all corrective

actions are fully and properly implemented.

▪ Conduct any investigations/special reviews assigned by Head of Audit/GCAO.

Reporting

Ensure that all functional reports are prepared timely and accurately and meet Group requirements, policies and

quality standards.

Job Context:

Specific Accountability

▪ Safeguarding against potential loss and contributing to the Information Security, Technology, Data Domain and

System Integration systems and procedures, by reporting whether Operational/Regulatory controls of FAB

standards are effectively carried out and are efficient in the units/departments audited.

▪ Reviewing the functions within Information Security, Technology, Data Domain and System Integration of the

bank end to end and identifying areas of correction / improvement.

▪ Lead and guide team members on applying data analytics/automated/enhanced testing techniques in audit

execution, including continuous monitoring routines across domains of Information Security, Technology, Data

Domain and System Integration systems, to extend assurance beyond sample-based testing and to support

continuous auditing of key controls.

Examine and comment on the process for the early recognition of problems (if any) and their remedial

management to minimize the loss.

▪ Preparation / Review of Audit MIS/ dashboards including audit committee presentation slides relating to audit

conducted in the GSO, Technology and Data domains.

▪ Maintain up to date knowledge and understanding of key regulatory developments and banking practices,

including but not limited to Information Security, Cyber Security, Business Continuity and Resilience, Technology,

Data Domain (including Data Privacy) and System Integration, across different jurisdictions relevant to FAB Group;

Interpret those requirements into practical control and evidence expectations, drive necessary changes in Audit

plan & working programs to take into consideration regulatory changes across relevant auditable areas.

▪ Act as a trusted advisor to the Business, Group Security, Group Technology and Data Domain, in the areas of

Information Security, Cyber Security, Business Continuity and Resilience, Technology Governance & Risk

Management, Technology Portfolio Management, Technology Outsourcing, Data Privacy, Data Governance

Applied and Advanced Analytics and related Regulatory Compliance.

▪ Contributing towards the enhancement of relationship between GIA and stakeholders.

▪ Keeping abreast of the local and international economic trends, banking practices and regulatory prescriptions.

QUALIFICATIONS & EXPERIENCE:

Minimum Qualification

▪ Bachelor’s degree.

▪ Relevant post-graduate qualification and/or relevant professional qualification and/ or certification desirable.

▪ CISA Certification is essential and any additional relevant certifications such as CISSP, CISM & CSX.

Minimum Experience

▪ Minimum 10 years’ relevant experience with an International Bank or Big 4. Internal Audit experience strongly

preferred (but not mandatory). At least 5 years similar positions of progressively increasing managerial

responsibilities in the Bank Operations, Risk Management and/or Audit function.

▪ Expert knowledge of operational activities and processes and associated risks within the Information Security,

Cyber Security, BCM, Technology and Data domains, including the control frameworks and standards commonly

used to design and assess controls in those domains.

▪ Strong working knowledge and demonstrable ability to interpret regulatory expectations across multiple

jurisdictions in the domains of Information security, Technology, BCM and Data Management.

▪ Strong leadership capability and team-oriented with highly developed problem-solving skills.

▪ Self-directed, able to manage multiple tasks and ability to work under pressure.

▪ Excellent analytical skills.

▪ Exceptional verbal and written communication skills, with a strong ability to comprehend, articulate, and translate

complex technology, cybersecurity, and business concepts for diverse stakeholders.

Source: First Abu Dhabi Bank careers page