IT Internal Audit

Responsibilities

• Help maintain the IT audit universe, identify technology risks, and prepare the risk-based IT audit plan
• Plan and conduct assigned IT audits: audit programs, walkthroughs, control testing, documentation
• Review IT policies, governance, and risk management against QCB requirements and internal policies
• Assess IT general controls: user and privileged access, segregation of duties, change management, system development, production deployment
• Review application controls and data integrity: critical applications, payment systems, databases, interfaces, reconciliations
• Review infrastructure, cybersecurity, and IT operations: networks, servers, cloud, patching, security monitoring, incident management
• Escalate areas needing specialist assessment to the Chief Internal Auditor
• Assess disaster recovery and resilience: backups, restoration, recovery objectives, recovery testing, gap