Audit Associate – ICT and Data Analytics (Fixed Term - 2 Years)

(1 Position(s))

Job Location: Head Office

Job Purpose:

Responsible for conducting ICT, Cybersecurity and Data analytics audits, specifically to champion continuous auditing through data analytics and evaluating the security posture of the bank's information technology systems, networks, and data.

Main Responsibilities:

• Participate in the planning, execution and reporting of ICT audits, Cybersecurity assessments and Data Analytics with minimal supervision.
• Provide assurance on existence, adequacy and effectiveness of controls designed protect systems and general IT infrastructure against potential cyber threats and vulnerabilities, and ensure compliance with industry standards, regulations, and best practices.
• Responsible for regular extraction and analysis of data from critical systems of the bank in order to identify control weaknesses for corrective action. The position also provides support to internal auditors in using computer-assisted audit techniques.
• Based on a review and evaluation of current Information Systems internal controls, assess potential risk, and exposure to the Bank, and prepare detailed audit programs describing tests to be performed.
• In consultation with Audit Managers, review ICT and cybersecurity related risk assessment and audit programs for change or improvements, if any.
• Test and validate the security of ICT systems, networks, and applications to ensure their resilience against cyber-attacks.
• Review and evaluate the design and effectiveness of existing network security devices and systems, such as firewalls, intrusion detection systems, and data encryption.
• Document findings and present reports to management, detailing any security risks and recommended remediation steps.
• Stay current with the latest cybersecurity trends, techniques, and technologies, and assist with the training and education of other team members.
• Communicate effectively with all levels of management, both internal and external, on security issues and trends.
• Perform any other Audit, in Information technology, Data analytics and other operational audits.

Knowledge and Skills:

• Understanding of cybersecurity technologies, practices, and regulations, including data privacy and protection laws.
• Understanding of network architecture, protocols, and technologies, such as TCP/IP, DNS, and DHCP.
• Understanding of network security concepts and technologies, such as firewalls, intrusion detection/prevention systems, VPNs, and encryption.
• Knowledge of security standards, such as ISO 27001, NIST, and PCI DSS.
• Familiarity with security tools, such as firewalls, intrusion detection systems, and security information and event management (SIEM) solutions.
• Understanding of network architecture and security, including firewalls, routers, and switches.
• Familiarity with audit tools such as ACL, IDEA, Microsoft Visio etc.
• Good analytical and problem-solving skills
• Excellent written and verbal communication skills
• Ability to demonstrate a degree of personal integrity and independent judgment.

Qualifications and Experience:

• Bachelor's degree in Computer Science, Information Technology, or related fields.
• Professional certifications, such as Certified Information Systems Auditor (CISA) Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH), Cisco Certified Network Associate Security (CCNA Security), CompTIA Security, Certified internal auditor (CIA) will be an added advantage.
• Minimum of 2 years' experience in IT/cybersecurity audits and Data Analytics.
• Experience in conducting network security assessments and audits will be an added advantage.

NMB Bank Plc is an Equal Opportunity Employer. We are committed to creating a diverse environment and achieving gender balanced workforce.Female candidates and people living with disabilities are strongly encouraged to apply for this position.NMB Bank Plc does not charge any fee in connection with the application or recruitment process. Should you receive a solicitation for the payment of a fee, please disregard it.Only shortlisted candidates will be contacted.

Job closing date :25-Jun-2025