AEON Bank Hiring! Full Time Senior Manager, Technology Assurance in Federal Territory - Ricebowl

Job Summary

The candidate will work as part of the Technology Audit Team and reports to the Head, Technology Assurance. The candidate will evaluate the Bank’s governance and controls related to the Bank’s technology, infrastructure, systems, and processes to ensure they are adequate and efficient while compliant with relevant regulatory requirements and internal policies and guidelines.

The candidate is expected to carry out technology audits as per the audit objective, scope and timeline. He will engage auditees and handle discussions, meetings (Open meeting, Exit meeting, etc.) and walkthroughs throughout audit engagements. The candidate is responsible to identify control gaps and risks associated with technology infrastructure, process and systems and recommend remediations, improvements and risk mitigations. The candidate is expected to build good relationships with auditee and stakeholders prior to, during and post audit engagements.

Job Responsibilities

• Key player for Technology Audit Team: Works in Technology Audit Team and reports to the Head, Technology Assurance (Technology Audit).
• Plan and Execute Audit Engagements: Oversee the planning, control, and execution of technology audit engagements for AeonBank.
• Conduct Comprehensive Audit Reviews: Perform audits based on established audit scope, timeline, and approach, assessing the adequacy and effectiveness of procedures, controls, processes, infrastructure, and application systems.
• Identify control gaps and risks associated with technology and provide audit recommendations: Provide independent assessment and offer objective recommendations to strengthen controls, mitigate risks, prevent losses, and add value to business processes while ensuring compliance with regulatory requirements as well as the Bank’s policies and procedures.
• Communicate Audit Findings: Highlight audit findings, risk implications, root causes and provide appropriate recommendations to address identified gaps and risks.
• Document Audit Work: Gather relevant information and artifacts as evidence of controls and gaps being assessed as well as to validate findings.
• Monitor Corrective Actions: Monitor status of closure for all agreed corrective actions within the agreed timelines.
• Handle ad-hoc matters: As required by the Management, Board and/or regulators.

Job Requirements

• Bachelors in Computer Science / Information Technology / Technology Audit or related fields, and professional certifications like CISA, CISSP, or CISM.
• Minimum 5–8 years of professional experience in IT audit, risk management, cybersecurity, or information security. Hands-on technical experience in IT / cybersecurity, IT operations, cloud infrastructure and services is an advantage.
• Proficiency in auditing among others, cybersecurity, operating systems, networks, databases, and cloud environments (AWS, Microsoft Azure, etc.).
• Background in auditing financial services, banking, or large-scale enterprise IT infrastructure is highly preferred.
• Exceptional verbal and written communication skills in English, with the ability to translate highly technical findings into actionable, non-technical advice for management and stakeholders.
• Deep understanding of regulatory requirements (e.g. BNM and PayNet) and industry-standard security frameworks such as RMiT, NIST, COBIT, ISO 27001, and ITIL general controls.
• Strong problem-solving skills with the ability to identify root causes and recommend robust solutions for identified vulnerabilities.
• Exposure to technology stacks such as GitHub, SonarQube,Visual Studio, intelliJ, Android Studio, xCode, nodeJS, ReactJS, NextJS, React Native, Java, Spring Boot, Utilities, Docker, Lens (Kubernetes IDE), DBeaver, Postman, is an advantage.
• Able to work independently, and possess excellent interpersonal skills.