Audit Manager, Technology & Cyber Security

About the role

KFH Bahrain is looking for an Audit Manager, Technology & Cyber Security. The role plans, executes and reports on IT and cybersecurity audits, providing independent assurance over technology governance, IT operations, cybersecurity controls, digital banking, IT infrastructure, emerging technologies and compliance with internal policies and regulatory standards. It also provides technical support and subject-matter expertise to strengthen the bank's cyber resilience.

Key responsibilities

• Take part in the annual technology and cyber security risk assessment and audit planning, identify key risks and recommend audit priorities
• Carry out end-to-end IT and cyber security audits, assessing design and operating effectiveness of controls and benchmarking compliance against standards, frameworks, laws and regulations
• Use data analytics and automated techniques to improve audit efficiency, accuracy and coverage
• Produce audit reports with findings, risks, root causes and recommendations, communicate with clients and present results to senior management
• Follow up on remediation of findings, track issues and escalate delays that pose unacceptable risk
• Maintain high-quality working papers, contribute to improving audit processes and adopt digital audit tools
• Act as subject-matter expert on digital transformation, cloud, fintech, data analytics, AI/ML controls and IT regulation, and carry out ad-hoc audit assignments or investigations
• Complete mandatory training and CPD, and champion audit management and data analytics tools

Required profile

• Bachelor's degree in Information Technology, Computer Science, Cyber Security or a related field; Master's degree preferred
• Certified Information Systems Auditor (CISA) is required
• 6 years or more of technology and cyber security experience, including at least 3 years of IT auditing in financial services or a related industry
• Preferred certifications: CIA, CISM, CISSP, CFE, CRSIC, CGEIT, ACCA, CPA, CFA, Cloud (AWS/Azure)