Cyber Security-Internal Audit (AVP/ VP)

Role & responsibilities

• The purpose of this role is to deliver the Technology Audits, assist in the identification of Technology Risks and to test key Technology controls.
• Support the planning, execution and reporting of a small simultaneous portfolio of Audit activity as set out in the Audit Charter and the annual Audit Plan.
• Define and develop appropriate Technology audit capability within firm's Internal Audit team and contribute to Audits Annual and Dynamic planning process.
• Internal Audit is the Third line of defense in ensuring the effectiveness of the organisations controls in detecting, preventing and correcting risk.

Skills:

• Strong Networking, Privileged Access Management, Active Directory, Cloud, Windows, or Linux/Unix skills. Familiarity with the MITRE Attack framework, OWASP top 10, knowledge of common security vulnerabilities and threats.
• Scripting language understanding is advantageous (Python, Bash, PowerShell, etc.)
• A growth mindset, a strong track record in assurance/risk/controls and a solid set of core skills and competencies around stakeholder management, communication, and time management.

Preferred candidate profile

• 6+ years of experience in Security auditing (Internal Audit) is required.
• Experience knowledge of security tools like Firewalls, IPS/IDS, WAF, SIEM/SOC, Nessus, CyberArk, Qualys, Wireshark, Metasploit, etc.
• 3+ years of technology/security experience working in large organisations. Prior experience in the delivery of audits across Financial Services would be highly advantageous.
• Familiarity with the ISO 27001, NIST CSF, PCI-DSS frameworks would be advantageous.

Qualification

• A degree or tertiary education in technology or a related field is required.
• Industry-recognised Security certifications such as CISSP, OSCP, GCIH and/or SABSA are highly preferred.