We have an urgent requirement for Head of IT Audit in banking domain is required for our banking client in OmanLead the Bank’s IT Audit function, develop risk-based audit plans, and provide independent assurance on IT governance, technology controls, and regulatory compliance..---MustConduct audits covering cybersecurity, information security, cloud security, IAM, vulnerability management, data protection, and technology risk frameworks..--MustReview and audit Core Banking, Digital Banking, Payment Systems, SWIFT, infrastructure, applications, disaster recovery, and business continuity controls.--MustPartner with senior management, regulators, and business leaders, present audit findings to executive committees, and lead high-performing IT Audit teams.---MustStrong Banking Domain --MustJob PurposeThe Head of IT Audit is responsible for leading and managing the Bank's Information Technology Audit function, providing independent assurance on the effectiveness of IT governance, cybersecurity, digital transformation initiatives, IT operations, infrastructure, cloud environments, and technology risk management practices. The role ensures that technology controls, regulatory requirements, and industry best practices are effectively implemented and monitored across the Bank.Key ResponsibilitiesIT Audit Leadership
- * Develop and execute the annual IT Audit strategy and risk-based audit plan.
- Lead IT audits across applications, infrastructure, cybersecurity, cloud platforms, digital banking systems, and third-party service providers.
- Ensure audit coverage for emerging technologies, digital initiatives, and technology transformation programs.
- Present audit observations, risks, and recommendations to senior management and Audit Committee.
IT Governance & Risk Management
- * Assess the effectiveness of IT governance frameworks and technology risk management practices.
- Evaluate compliance with regulatory requirements, Central Bank regulations, and internal policies.
- Review IT strategy alignment with business objectives and organizational risk appetite.
- Monitor remediation of audit findings and validate closure of management actions.
Cybersecurity & Information Security Audits
- * Conduct audits covering cybersecurity governance, vulnerability management, IAM, network security, data protection, and incident response.
- Review security controls aligned with ISO 27001, NIST, CIS, SWIFT, and other relevant frameworks.
- Assess effectiveness of SOC operations, threat management, and security monitoring processes.
Technology & Infrastructure Audits
- * Evaluate controls over data centers, networks, servers, operating systems, databases, and cloud environments.
- Review disaster recovery, business continuity, backup, and resilience frameworks.
- Assess technology projects, system implementations, and change management processes.
Digital Banking & Application Audits
- * Audit core banking systems, internet banking, mobile banking, payment systems, cards, and digital channels.
- Review SDLC, DevSecOps, application security, system integrations, APIs, and technology architecture controls.
- Assess data integrity, availability, confidentiality, and system performance controls.
Stakeholder Management
- * Collaborate with business leaders, technology teams, risk management, compliance, and external auditors.
- Provide advisory services on technology risk, cybersecurity, and control improvements.
- Build strong relationships with regulators and external audit partners.
Team Leadership
- * Lead, mentor, and develop the IT Audit team.
- Establish performance objectives, training plans, and succession strategies.
- Promote a culture of continuous improvement and innovation within Internal Audit.
Required Experience
- * 12+ years of experience in IT Audit, Information Security, Technology Risk, or IT Governance.
- Minimum 5 years in a leadership or management role.
- Proven experience within Banking or Financial Services.
- Strong exposure to Core Banking, Digital Banking, Payments, Cards, and Regulatory environments.
- Experience managing enterprise-wide IT audits and technology risk assessments.
Preferred Certifications
- * CISA (Certified Information Systems Auditor)
- CISSP (Certified Information Systems Security Professional)
- CRISC (Certified in Risk and Information Systems Control)
- CGEIT (Certified in the Governance of Enterprise IT)
- CIA (Certified Internal Auditor)
- CISM (Certified Information Security Manager)
- ISO 27001 Lead Auditor
- Certified Cloud Security Professional (CCSP)
Knowledge Areas
- * Basel Guidelines
- Central Bank Regulations
- SWIFT Security Controls Framework
- COBIT
- NIST Cybersecurity Framework
- ISO 27001
- PCI DSS
- ITIL
- Risk Management Frameworks
Key Deliverables
- * Annual IT Audit Plan Execution
- Technology Risk Assessments
- Cybersecurity Audit Reviews
- Regulatory Compliance Assessments
- Audit Committee Reporting
- IT Governance Reviews
- Vendor & Third-Party Risk Audits
- Digital Banking & Core Banking Audits
- Remediation Tracking & Validation
Skills: security,bank,it audit
