Internal Controls Manager, Technology
To strengthen the Bank's technology and cybersecurity control environment by monitoring key controls, driving continuous controls testing, and providing risk insights through data analytics and automation. The role supports the First Line in identifying and addressing technology and cyber risks, whilst ensuring controls remain effective and emerging risks are detected and remediated promptly.
Type of Qualification: First Degree
Field of Study: Computer science, Information Technology, Data Science, Risk Management, Finance, Business Commerce or related field
Certifications such as CISM, CRISC, CISA or CISSP are highly desirable.
Experience Required
8-10 years
- Relevant experience in technology risk management, cybersecurity, or internal controls within the financial services / banking industry.
- Demonstrated experience in data analytics, automation, scripting (Python, SQL, R) and visualization tools (Power BI, Tableau) with the ability to develop scalable continuous monitoring solutions.
- Experience building and managing a Continuous auditing and Data Analytics program, including automating common analyses, creating visualizations and recurring audit check procedures. Extracting data from data warehouses and databases (example: SQL DB's).
- Proven track record of successfully leading and managing a team of professionals.
- In-depth knowledge of technology and cybersecurity frameworks, standards, and best practices (e.g. ISO, COBIT), IT governance and project management.
- Familiarity with relevant banking regulations and compliance requirements.
- Understanding of IT general controls and a deep understanding of technology risks.
- Possess relevant technology skills including data analytics or information systems auditing skills.
- Proficiency in use of data analytics tools with demonstrable scripting, visualization analytics skills.
- Strong analytical and problem-solving skills, with the ability to assess complex risk scenarios and propose effective solutions.
- Excellent communication and presentation abilities, both written and verbal, to convey complex technical concepts to non-technical stakeholders
Behavioural Competencies:
- Developing Expertise
- Directing People
- Documenting Facts
- Embracing Change
- Examining Information
- Exploring Possibilities
- Following Procedures
- Providing Insights
- Team Working
Technical Competencies:
- Evaluation of Internal Controls
- Process Governance
- Promote Good Governance, Risk & Control
- Quality Control
- Risk Identification & Management
- Risk Response Strategy
- Business Acumen