• Assess and provide an independent view to internal controls and risks of a company’s technology infrastructure and processes.
• Identify the weaknesses in computer systems and networks and creating an action plan to prevent to help mitigate and repot such identified risks.
• Lead the planning and execution of internal audit procedures and the creation of internal audit reports.
• Participating in maintaining 'Information Technology and Cyber Security' Universe to preform annual risk assessment and prepare IT Audit strategic and annual plan.
• Conduct efficient and effective reviews based on the approved charters and procedures to provide assurance to top management and the board
• Examining and testing internal IT controls, evaluate the design and operational effectiveness, determine exposure to risk and recommend remediation strategies.
• Conduct Cyber Security assessment and testing by evaluating security controls and management processes effectiveness and IT Infrastructure exposure to risks, vulnerabilities, and threats
• Review the bank processes and infrastructure to assess their resilience to incidents and disasters.
• Reviewing, evaluating and testing Applications security and controls for the bank and its subsidiary to provide assurance to top management and the board.
• Reviewing, evaluating and testing IT controls along with IT processes, operations activities, and documentation in the Information Technology Production, Development and Governance and Project Management Units
• Assist on reviewing, evaluating, and testing IT infrastructure (OS, Databases, Security Controls, tools, Storage, Backup) and network design, configuration, Implementation, and/or operation.
• Reviewing the adherence to the regulatory requirements related to IT/Cyber Security and Business continuity such as SARIE requirements, SAMA Cyber Security Framework, etc
• Support on communicating complex technical issues in simplified terms to the relevant stakeholders.
• Follow-up and evaluate implementation of raised issues on identified risks either internally or externally.
• Conduct investigations and provide independent audit view on cases required by management or SAMA

المهارات