IT & Cybersecurity Audit Supervisor

About the role

Region Trade Bank is looking for an experienced professional to lead and supervise internal audit engagements focused on information technology, cybersecurity and related risk areas within the banking environment.

Key responsibilities

• Lead and supervise IT and cybersecurity audit engagements in line with the approved audit plan and risk‑based methodology.
• Assess IT governance frameworks, technology risk management practices and cybersecurity controls.
• Evaluate the effectiveness of IT General Controls (access, change, incident, backup and recovery).
• Review security and integrity of banking applications, digital platforms and supporting systems.
• Assess vulnerability management, penetration testing programmes and remediation activities.
• Evaluate cyber‑incident monitoring, detection, response and recovery processes.
• Review business continuity, disaster recovery and operational resilience arrangements.
• Assess third‑party technology and cloud‑service risks.
• Prepare high‑quality audit reports, present findings and monitor corrective actions.
• Provide technical guidance, coaching and supervision to IT auditors and help develop audit methodologies.

Required profile

• Bachelor’s degree or higher in Computer Science, IT, Cybersecurity, Information Systems or related field.
• Minimum 10 years of experience in IT, IT audit, cybersecurity or technology risk, with at least 3 years leading audit engagements.
• Banking or financial‑services experience strongly preferred.
• Proven experience supervising IT and cybersecurity audit projects.
• Relevant professional certifications such as CISA, CISSP, CISM, CRISC, ISO/IEC 27001 Lead Auditor or COBIT are a plus.

Required skills

• IT audit and cybersecurity assurance
• IT governance and technology risk management
• IT General Controls (access, change, incident, backup)
• Identity and Access Management (IAM)
• Vulnerability management and security testing
• Network, infrastructure, server and database security
• Security monitoring and incident response
• Business continuity, disaster recovery and operational resilience
• Data protection and information security
• Audit reporting, risk assessment and root‑cause analysis