IT Audit Specialist (Virtual Banking)

About the role:

Forget traditional, paper-heavy auditing. As an IT Audit Specialist at BankX, you will be a pioneering technical force within our Internal Audit team, responsible for rewriting the rules of how a bank secures its operations.

In this role, you will pair with the IT Audit Led to drive the new era of IT Audit. You won't just check compliance boxes—you will design and deploy a scalable, next-generation IT audit methodology from Day 1. This is a high-impact opportunity to audit a modern, cloud-native, API-first architecture while embedding AI and automation directly into the audit lifecycle to eliminate manual effort by design.

Key Responsibilities:

IT & Technology Audit

• Execute risk-based audits covering IT General Controls (ITGC), cybersecurity, cloud infrastructure, application controls, DevSecOps, technology operations, and third-party technology services.
• Assess governance and control effectiveness across digital banking systems, APIs, cloud platforms, and critical technology assets.
• Review vulnerability management, penetration testing, incident management, and cyber resilience processes.
• Evaluate technology compliance with BOT regulations, NIST, ISO 27001, CIS Controls, COBIT, and internal policies.

Digital & Virtual Banking Assurance

• Perform audits of digital onboarding, e-KYC, fraud monitoring, payment platforms, digital channels, and open banking ecosystems.
• Assess system reliability, information security, and operational resilience supporting virtual banking operations.
• Review business continuity and disaster recovery capabilities for critical technology services.

Data Analytics & AI-Enabled Auditing

• Utilize SQL, Python, BI tools, and analytics platforms to conduct audit testing and continuous monitoring.
• Develop automated audit scripts and data-driven control testing routines.
• Use approved AI tools to assist in risk assessment, data analysis, workpaper drafting, and issue identification.
• Critically review and validate AI-generated analyses, audit observations, and draft reports before issuance.
• Identify opportunities to enhance audit efficiency through automation and AI technologies.

Reporting & Stakeholder Management

• Prepare audit findings and reports in accordance with IIA Standards.
• Communicate technical risks clearly to management, regulators, and Audit Committee stakeholders.
• Monitor remediation progress and validate issue closure.

Qualifications:

• Bachelor’s degree in computer science, Information Technology, Computer Engineering, Cybersecurity, Data Science, or related field.
• 3-7 years of experience in IT Audit, IT Risk, Cyber Security, Technology Risk Management, or related disciplines.
• Experience within banking, fintech, digital banking, payment, or regulated financial services preferred.
• CISA preferred.
• CISSP, CISM, CRISC, Cloud related e.g., AWS/Azure/GCP Security certifications are advantageous.
• Strong understanding of cloud, APIs, cybersecurity, infrastructure, and application controls.
• Knowledge of NIST, ISO 27001, CIS Controls, COBIT, OWASP, and relevant regulatory requirements.
• Proficiency in SQL and data analytics tools are advantageous.
• Familiarity with Python and audit automation techniques are advantageous.
• Practical experience utilizing AI/LLM technologies in audit, risk, compliance, or operational processes are advantageous.
• Ability to evaluate and challenge AI-assisted outputs for accuracy, completeness, and professional judgment are advantageous.