VP – Information & Cybersecurity Auditor

Key responsibilities

• Support the Head of Audit & Management team  in the development of the GIA risk assessment and development of an appropriate audit plan for the assigned portfolio;
• Strong understanding of identity and access management, vulnerability management, code security, security operation centre, threat intelligence, red and purple teaming, penetration testing, ICS related industry standards such as NIST and CIS, and risk management.
• Knowledge of cybersecurity principles, frameworks, and best practices.
• Perform, support, or lead where directed, the planning, fieldwork, and reporting of internal audit engagements to deliver agreed assurance objectives to established GIA standards and timelines; and
• Act as Team Manager or Team Lead to lead the delivery of high risk audits with integrated teams;
• Execute audit work and issue validation in an efficient and effective manner, within the given budget and timelines;
• Provide clear guidance, detailed review and supervision of the audit team’s work, so that audit deliverables meet quality standards;
• Clearly identify the risks and impact of issues during issue writing, agreeing these issues with management and obtaining quality management action plans to mitigate the risk;
• Provide guidance to the team on business/ audit technical knowledge and management skills;
• Champion innovation and increase the use of leading edge methods, such as artificial intelligence and data analytics, in audit assignments; and
• Track the implementation/delivery of the agreed issues and action plans for the audits assigned, understanding the key risks arising, provide advice on resolution of issues to auditees/action plan owners and escalate audit findings that remain unresolved.