GRC Auditor
Abhi Fintech
Karachi, Karachi City, Sindh, Pakistan
Posted on Dec 1, 2024
- Key Responsibilities:
- Conduct regular IT risk assessments to identify vulnerabilities and ensure consistent application of security measures across all technology platforms.
- Develop and execute comprehensive audit plans to assess the adequacy and effectiveness of information technology and security controls.
- Ensure that IT and business operations are in alignment with organizational policies and regulatory requirements.
- Verify compliance with standards such as ISO 27001.
- Prepare clear and comprehensive audit reports detailing audit findings and recommendations.
- Conduct follow-up audits to monitor management’s interventions and compliance with audit recommendations.
Skills & Qualifications:
- 3-5 years of experience in IT audit, information security, or a similar role within a regulated financial services environment.
- Relevant certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) are highly desirable.
- Strong understanding of IT and security frameworks (e.g., COBIT, ISO27001).
- Familiarity with financial regulations and standards affecting lending practices and data protection (e.g., PCI-DSS, GDPR).