Avp/Team Lead (Information Systems Audit)
Information Systems Audit Department, Head Office, Islamabad.
Review Systems and Operations, Network and Communication infrastructure, Servers, Applications and Databases in order to ensure integrity, confidentiality, reliability, and availability. Document conclusions and recommendations on the quality and effectiveness of ICT infrastructure. To comply with IS audit standards and ensure that ICT requirement of the Bank are fulfilled properly and examine if existing controls in ICT comply with the security policy, best practices, and regulatory guidance. Prepare audit reports and provide conclusions and recommendations. Review application development environment, make sure that standard practices of SDLC are followed, SOP are defined and followed. Ensure security and controls in Databases and application source code security, Change management and version controlling, Database architecture, configuration and security etc. Test the security and integrity of network including access controls like firewalls, intrusion detection, threat and vulnerabilities scanning, encryption, and environmental, physical exposure and controls. Assess Policies & procedures, Project Management, Budgets, Procurements, Inventory, Risk Management, Disaster recovery and trainings etc. Effectively convey and Communicate audit findings and recommendations to the management via reports and presentations Conduct trainings for financial auditors to carryout General IT Controls Audit at field offices.