Deputy Manager IT Audit

About the Role

NIFT is seeking a dedicated and detail-oriented Deputy Manager – IT Audit to strengthen its Internal Audit function. This role supports the planning and execution of risk-based IT audits, ensuring compliance with SBP regulatory guidelines, CSR & Cyber Hygiene standards, and IT governance frameworks.

The Deputy Manager will be responsible for conducting audits of information systems, infrastructure, applications, and digital controls, while assisting in post-incident reviews, SBP inspection readiness, disaster recovery evaluations, and risk assessments. The position provides assurance on IT controls and contributes to safeguarding NIFT’s resilience against cyber and operational risks.

Key Responsibilities

• Assist in developing and executing the annual IT audit plan.
• Conduct risk-based audits of IT infrastructure, applications, and general IT controls.
• Participate in post-incident audits to review breaches, downtime, or control gaps.
• Evaluate the effectiveness of cybersecurity, BCP/DR, backup, and data protection controls.
• Support compliance with SBP IT Governance Framework, CSR & Cyber Hygiene standards, and ISO 27001 practices.
• Review user access management, privileged controls, and segregation of duties.
• Perform audits of web-based applications, payment systems, and integration controls.
• Conduct vendor/third-party IT risk assessments to ensure compliance and data security.
• Utilize audit tools (ACL, IDEA, etc.) and analytics to enhance assurance delivery.
• Assist in external audits, SBP inspections, and follow-up of audit findings.
• Contribute to training and awareness sessions on IT controls and risks.
• Support risk assessments and audit calendar planning exercises.

Qualifications & Experience

• Education:
• Master’s degree in Computer Science, Information Systems, or related field.
• Preferred certifications: CISA, CISSP, CRISC, or CIA (with IT Audit exposure).
• Experience:
• Minimum 3–5 years of IT audit/risk experience, with exposure to audit planning, ITGC reviews, and SBP-related inspections.
• Prior experience in auditing IT systems, data centers, and applications.
• Familiarity with regulatory frameworks (SBP IT Governance, ISO 27001, SECP).
• Skills & Competencies:
• Knowledge of IT auditing standards (ISACA, COBIT, NIST).
• Strong risk assessment and documentation skills.
• Good communication and stakeholder management abilities.
• High ethical standards and professional integrity.

Why Join NIFT?

• Be part of a leading organization in the financial technology sector.
• Gain exposure to regulatory audits, cybersecurity frameworks, and fintech-related risks.
• A collaborative environment that values integrity, learning, and innovation.

Job Type: Full-time

Pay: From Rs150,000.00 per month

Education:

• Bachelor's (Required)

Experience:

• IT Audit: 3 years (Required)

Work Location: In person