Associate Manager, Information & Communication Technology Audit

চাকরির বিবরণ

BRAC Bank is hiring an Associate Manager, Information & Communication Technology Audit (job number 2600007G, internal audit, internal control and compliance function). The role performs end-to-end audits in IT, information security and cloud security, from risk assessment and planning to work programme execution and reporting, and checks that the bank's IT practices adhere to laws, regulations and standards such as the Bangladesh Bank ICT and Cloud Guidelines, ISO 27001 and PCI DSS. Posted on the bank's own careers portal on 7 October 2026. The listing does not state a closing date.

দায়িত্ব

• Perform end-to-end audits in IT, Information Security and Cloud Security, from initiation/risk assessment, planning and development of the work program to execution and reporting
• Identify potential risks in AD, DC, DNS, hypervisor, virtualization platforms, container-based technology and databases
• Write and execute SQL queries independently against production databases (Oracle, SQL Server, MySQL/PostgreSQL)
• Identify potential risks related to data security, IT processes and compliance with regulatory requirements and industry standards
• Plan and design audit procedures and strategies based on the organization's specific needs and objectives
• Conduct audits of IT systems, applications and processes to assess their effectiveness, security and compliance
• Maintain detailed records of audit findings, including vulnerabilities, weaknesses and recommendations
• Ensure the organization's IT practices adhere to relevant laws, regulations and standards (e.g. BB ICT and Cloud Guidelines, ISO 27001, PCI DSS)
• Provide recommendations and action plans to address identified vulnerabilities and improve IT security and efficiency
• Communicate audit findings and recommendations to stakeholders, including management and IT teams
• Stay updated on emerging threats, technologies and industry best practices to continually enhance the organization's cybersecurity posture
• Keep updated about banking knowledge, Bangladesh Bank guidelines, circulars, auditing standards and changes in law/regulations
• Analyze, assess and evaluate the risk of IT and information security systems and applications
• Conduct data analysis using suitable Computer-Assisted Audit Techniques (CAAT)

যোগ্যতা

• Master's or bachelor's degree from a reputed university in Computer Science, IT or a related field
• At least four to five years of relevant experience
• Relevant professional certifications from ISACA, ISC2, IIA, EC-Council, RHCE, CEH, ITIL, etc.
• Experience in IT and banking IT systems
• Sound analytical skills
• Knowledge of risk management and business continuity
• Up to date with the latest IT security and vulnerability management practices
• Sound knowledge of agile/DevSecOps processes
• Ability to adapt quickly to a dynamic and challenging environment
• Customer-centric, team player, and keen to develop others

দক্ষতা

• Cloud security
• Information security
• ISO 27001
• IT audit
• PCI DSS
• Risk management
• SQL