Bachelors Degree in Information Technology, Computer Science, Information Systems or a related field
Job Summary
We are seeking a detail-oriented and analytical IT Auditor to assess the effectiveness of our information systems, security protocols, and technology-driven operations. The successful candidate will play a critical role in identifying IT-related risks, ensuring regulatory compliance, and supporting business continuity across the exchange’s digital infrastructure.
Duties And Responsibilities
Plan, execute, and report on audits of IT systems, applications, infrastructure, and cybersecurity controls.
Evaluate IT general controls (ITGC), automated business controls, and application-level controls for effectiveness.
Identify risks and vulnerabilities within IT environments and recommend appropriate mitigation strategies.
Perform audits aligned with internal policies, industry standards, and regulatory frameworks (e.g., COBIT, ISO 27001, NIST).
Assess the adequacy of risk management practices and internal controls in IT operations.
Monitor compliance with information security policies, data protection laws, and regulatory requirements.
Support the development of IT governance frameworks to enhance oversight and accountability.
Participate in the evaluation of third-party service providers for IT security and compliance.
Prepare clear, concise audit reports that communicate findings, risks, and actionable recommendations.
Track the implementation of audit recommendations and follow up on remediation actions.
Maintain detailed documentation of audit work papers and ensure adherence to audit methodologies.
Provide expert advice to IT and business units on control improvements and risk mitigation.
Collaborate with cross-functional teams on systems implementation reviews, change management assessments, and IT-related projects.
Support internal capacity building by raising awareness of IT risks and control requirements across departments.
Education Other Skills Required
Bachelor’s degree in Information Technology, Computer Science, Information Systems, or a related field.
CISA, CISM, CISSP, or equivalent professional certifications are highly preferred.
Minimum of 3–5 years of hands-on experience in IT auditing, information security, or risk management, preferably in financial services or regulated environments.
Strong knowledge of IT systems, networks, databases, cloud platforms, and cybersecurity principles.
Excellent analytical, problem-solving, and communication skills.
Ability to work independently and manage multiple priorities.
Familiarity with audit tools and data analytics software is a plus.