Auditor

• Conduct audits of business applications to ensure compliance with internal controls, regulatory requirements, and best practices.
• Ensure application access is on a need-to-have basis.
• Segregation of roles and privileged user activity review.
• Perform application security reviews, confirming authentication, authorization, input validation, and encryption controls.
• Review of Change Management Process.
• Collaborate with development teams to identify and remediate security vulnerabilities.
• Review of software development lifecycle (SDLC).
• Participate in process reviews/redesigns and systems upgrades/implementation to ensure appropriate system controls are implemented.
• Assess the adequacy of security and controls built into the bank’s IT Applications.
• Render technical support to other teams in Internal Audit as required.
• Participate in other regular audits in the IT Audit Plan as assigned by the Head, IT Audit.
• Perform other duties as assigned by the Head, IT Audit.

Applications Systems Auditor

Product Auditor