IT Security and Information System Audit

• IT Security and Information System Auditor will help Bank by protecting internal controls and data within system. He/she will safeguard sensitive information by identifying weaknesses in a system's network and creating strategies to prevent any security breaches in the technology.
• Conduct IT audit by identifying, assessing, measuring and monitoring IT risk of the bank including both in house systems and vendor based solutions covering Information Security, Business Continuity and compliance risk of the bank.
• Vulnerability assessment and penetration tests for applications, infrastructure and network.
• Review and define requirements for information security solutions of the bank.
• Work on improvements for provided IT security services, including the continuous enhancement of existing methodology material and supporting assets of the Bank.
• Complete analysis and draw comprehensive conclusions of overall system risk of the bank, making recommendations for remediation strategy.
• Advises senior management of the bank by identifying critical IT security and fraudulence issues and recommending the risk-reduction solutions.
• Remain updated on IT strategy, tools, utilities and solutions, IT auditing standards, best practices, procedures and reporting of the banking industry.
• Prepare reports containing audit findings with recommendations for improvement/ opportunities for the IT Division.
• Conduct audit on overall information & related technological security aspect mentioned in the IC & C guidelines & ICT guidelines issued by Bangladesh bank.
• To determine information & related technological security loopholes and recommend feasible solution.

Full-time

• Minimum Bachelor in Computer Science & Engineering, Information Technology, Information & Communication engineering or any other relevant subject from reputed university from home or abroad.
• Having MBA will be an added advantage. No third division in entire academic records.
• Certified Information System Audit (CISA) or Equivalent to conduct Information System Audit.