Avp Global Planning and Oversight IT

Role Summary

You will be conducting individual IT audit assignments/ reviews in accordance with the approved audit plan and making practical/ feasible recommendations for mitigating risks/ improving controls and processes. In doing the above, the incumbent will ensure adherence to internal auditing best practices, including but not limited to the Standards for the Professional Practice of Internal Auditing (SPPIA), CoBIT principles and the System Development Life Cycle (SDLC) methodology.

You will also assist in post-implementation reviews of the various information systems used by the Group to support the business as well as pre-implementation reviews for select systems (based on the risk assessment exercise) to ensure adequate system controls are built into the systems during the development stage itself

Additionally, to the said responsibilities, you will also extend to the related secondary responsibilities that will be assigned to the IT Audit team in terms of specific activities/ functions to be audited, in addition to the primary responsibility with respect to the information system audits.

You will also be responsible for high level oversight and reporting of the IT Audit functions in key International QNB subsidiary companies, in accordance with the principles defined in the QNB International Governance Model.

Subsidiary IT Audit oversight includes:

- Review and comment on subsidiaries’ annual IT risk assessment and IT Audit universe
- Review and comment on subsidiary annual IT Audit plan alignment with risk assessment
- Coordinate inputs to International subsidiary plans - for critical audits (as determined at start of year with Chief Internal Auditor - Global IT & IS Audit and GCAE)
- Monitor Subsidiary progress against their IT Audit plans
- Coordinate resources for audit reviews with PS Domestic & International IT & IS IT Audit such that SME resource is available for subsidiary IT audits, and vice versa when required
- Coordinate periodically (e.g. every 2 years) and help execute a review of each subsidiary’s IT Audit Governance
- Responsible for executing specific IT Audit assignments (Infrastructure and Applications) as directed by the Chief Internal Auditor - Global IT & IS Audit and direct manager, in support of the Audit Plan for the Principal Specialist Domestic and International IT & IS Audit.

Role Description

Ensure oversight and reporting of the IT Audit functions in key International QNB subsidiary companies, in accordance with the principles defined in the QNB International Governance Model.

Implements KPI’s and best practices for the role.

Promote cost consciousness and efficiency and enhance productivity, to minimize cost, avoid waste, and optimize benefits for the bank.

Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same.

Demonstrate clear understanding of the important factors behind the bank's financial & non-financial performance.

Ensure adequate monitoring of subsidiary IT & IS Audit Plans to ensure consistency and quality of audit information.

Manage the relationship with subsidiary and Head Office departments in respect of International subsidiary oversight - with respect to Methodology & QA.

Liaise with the system development/project management personnel within Group IT and the respective vendor personnel (where systems are procured/ developed with external assistance) during the reviews of individual systems.

Responsible for oversight and reporting of the IT Audit functions in key International QNB subsidiary companies, in accordance with the principles defined in the QNB International Governance Model.

Oversee on day-to-day basis, the individual assignments comprising the approved plan to ensure that these are being conducted in accordance with the best practices for internal auditing, including but not limited to SPPIA recommendations/ guidelines, CoBIT principles and best practice IT Security and IT Governance guidelines.

Ensure that the audit planning, fieldwork and reporting stages are conducted in consonance with the procedures/ guidelines contained in the internal audit manual, including but not limited to communications to relevant auditee management on audit commencement, presentation of draft reports to auditee management and obtaining their responses and holding of closing meetings.

Perform first level review of all internal audit and other special assignment/ investigation reports and subsequent submission as directed to the Chief Internal Auditor - Global IT & IS Audit.

Determine whether test plans and test scripts are in place and actually used, whether testing conducted on the concerned system was adequate and whether all significant issues are resolved/ requirements of the concerned business users met and their sign-offs obtained before moving the system from the test phase to production.

Review compliance with the approved SDLC methodology