The Executive IT & IS Audit is responsible for independently and objectively assessing the reliability and effectiveness of governance, risk management, and design & operational effectiveness of internal controls. This includes executing internal audit processes, conducting audit engagements, and developing high-quality audit reports. The role requires adherence to organizational and professional ethical standards, compliance with relevant regulations, following MMBL audit methodology and international standards such as the International Professional Practices Framework (IPPF) by IIA and IT Audit & Assurance by ISACA.
• Contributes to risk assessment and supports the Head of IT & IS Audit in preparation of annual audit plan, addressing emerging risks and global themes;
• Conduct IT & IS audits and reviews of systems, applications and processes including, pre/post- implementation reviews, cybersecurity reviews, IT landscape/baseline assessments and business application reviews;
• Developing audit programs ensuring that auditing steps will accomplish the objectives, address major risk and exposures;
• Recommend improvements in internal controls designed to safeguard resources and to comply with applicable MMBL’s policies, procedures, State Bank of Pakistan (SBP) laws and regulations;
• Prepares quality and detailed audit work papers that evidence the work performed and any observations that arise; ensure completeness and adequacy of the same and to ensure that appropriate and sufficient audit work has been performed to achieve audit objectives;
• Drafts, prepares and submits audit observations to include them in the final audit report, requiring minimal re-write and/or additional queries, and submit the same to Head of IT & IS Audit for review;
• Fully effective in completion of audits with minimal supervision;
• Ensures timely delivery of audit engagements within the approved timeframe in accordance with the annual audit plan;
• Conduct follow-up on audit observations and evaluate the actions taken by management to address the highlighted risks;
• Maintains effective working relationships with the stakeholders in the areas of assigned work;
• Capable of conducting validations for various assignments as required by SBP.
• Perform any other function in connection with the internal audit assigned by Head of IT & IS Audit.
• Holds at least Masters / Bachelor's degree preferably Computer Science / Information Technology / Cybersecurity or equivalent.
• At least 4-5 years of previous work experience in Internal Audit/Information Technology/Information Security;
• International certifications (CISA, CISSP, CISM or equivalent) are highly preferable;
Knowledge / Skills:
• Extensive knowledge/work experience of best practices and frameworks including ITIL, COBIT, NIST, PCIDSS/SSF, ISO etc.;
• Analytical, problem solving and good report writing;
• Energetic, flexible and agile attitude.
Job Locations:
Head Office
About MMBL:
Mobilink Microfinance Bank Ltd. is providing banking services to over 42 million registered users including 16+ million monthly active customers across Pakistan. With a hybrid model that combines traditional microfinance with mobile/digital banking technologies, the bank now operates with over 100 branches and 200,000 branchless banking agents and provides a USSD (GSM) based digital channel offering savings, micro enterprise (MSME) loans, small housing loans, remittances, collection (utility bills and loan installments), mobile wallets, insurance, G2P, B2B & B2P payments; thus, playing a leading role in the promotion of financial inclusion.
MMBL is committed to fostering a positive and productive workplace, and our core values reflect this focus. These values include promoting innovation and entrepreneurship, encouraging teamwork and collaboration, and prioritizing a customer-centric approach in all aspects of our business.
Why Join MMBL ?
This is an opportunity for someone who is passionate about making a difference and playing a key role in driving transformative change. Our team is committed to empowering millions with the tools necessary to succeed in the digital age, and we're looking for a talented individual to join us in this endeavor.