VP & Head of Audit, Information Security

JOB PURPOSE:

A subject matter expert responsible for planning and executing audits covering the activities and processes of Group Security Office (GSO), Business Continuity Management (BCM), Data Domain (Data Governance, Data Privacy, Data Analytics & AI), Group Technology (GT) & System Integration Projects domestically and in all international locations as well as related peripheral activities across the FAB Group. Thorough understanding of IS, IT, BCM, Data & Integration domains, business/ relationship aspects, risk management processes and the regulatory environment, both in UAE and other relevant jurisdictions where FAB operates and apply them to auditable areas to provide assurance to Management by identifying weaknesses;

reporting and escalating significant Audit findings in a timely manner; and agreeing action plans to address the issues raised. Act as the day-to-day contact with Management in GSO, GT and Data Functions and related areas influencing change through providing advice. As part of the GIA Extended Management Team (EMT), provide input to GIA on issues that have impact on the FAB Group as a whole.

Conduct special investigations, reviews, additional tasks as and when required by GCAO / EVP / SVP.

KEY ACCOUNTABILITIES:

Strategic Contribution

• Lead audits of FAB Group s Information Security, BCM, Information Technology, Data Domain (Data Governance, Data Privacy, Data Analytics & AI) & System Integration functions and related activities in the UAE and across the international network (functional). Furthermore, Group Subsidiaries with Information Security, Technology, BCM, Data Domain and System Integration presence will be covered.
• Ensure that audits in Information Security, BCM, Data Domain (Data Governance, Data Privacy, Data Analytics & AI) & System Integration areas are conducted in accordance with the objectives laid down in the Annual Plan and ensure that the work program is completed in an efficient and effective manner on or ahead of schedule.
• Inform Head of Audit of any potential delays and/or changes to the Annual Plan.

People Management

• In undertaking audits:
  Provide guidance and on the job training for junior colleagues and conduct knowledge sharing to facilitate achievement of team objectives and completion of tasks in an efficient manner which is consistent with operating procedures and policy.
• Promote the organization s values and ethics in all activities within the team to support the establishment of a value driven culture within the bank.

Budgeting and Financial Performance

• Monitor the financial performance of given areas of activities versus budgets and ensure all activities are carried out in line with the approved guidelines while promptly reporting on any variances to management.

Policies, Systems, Processes & Procedures

• Execute to established GIA Policies, Guidance Notes, Procedures and Practice Notes in undertaking all tasks.
• Provide input to the development of GIA practices as per industry standards and regulatory expectations.
• Review all the activities of the Units within Information Security, Technology, Data Domain and System Integration related activities in all the jurisdictions in which the groups operate to define and maintain the Audit Universe. Coordinate with other teams to ensure efficient and effective coverage.
• Prepare and maintain a Risk Assessment of each of the Process Streams within Information Security, Technology, Data Domain and System Integration related Units and applicable subsidiaries (e.g. international entity) as identified in the Audit Universe. In this respect, work with the businesses to promote periodic self-assessment of risks and controls.
• Establish/update and maintain Audit programs in the central audit management tool.
• Conduct audits of the Processes within Information Security, Technology, Data Domain and System Integration related activities and assess if:
  • Divisional/Unit Line management have identified and classified the risks in their activities.
  • Governance, risk management and control procedures are adequate, effective and efficient to reduce risks of errors, omissions and loss to acceptable levels at an acceptable cost.
  • Improvements/enhancements to the governance, risk management and internal control structure are required.
  • Data and transaction processing meet the required standards of reliability, integrity and availability.
  • The Division s/Unit s assets are being safeguarded.
  • The use of resources is efficient and effective.
  • Draft audit report submitted by…