Divisional Head – Technology Audits (SVP/EVP) | National Bank of Pakistan — Karachi

Minimum graduation or equivalent from a HEC-recognized university/college/institute. Professional certifications preferred: CISA, CRISC, CISM, CEH, CCSP, CCISO, ISO 27001 Lead Auditor or other relevant IT/IS certifications.

Minimum 12 years of experience in Information Technology and/or Audit, Information Security and/or Enterprise Risk Management within a financial institution or FinTech. Experience supervising and leading IT audit teams, third-party IT risk management, data analytics, automation and AI tools preferred.

• Strong audit and IT risk assessment skills; ability to work in fast-paced, deadline-driven environment
• Excellent English communication and presentation skills (written and verbal)
• Knowledge of regulatory requirements, international standards, information/IT risk and controls, cyber security, data protection/privacy
• Experience with cloud computing, AI, blockchain, and third-party integrations
• Leadership, stakeholder management, report writing, negotiation and interpersonal skills

• Conduct IT risk assessments and develop related audit engagement plans
• Prepare and execute IT audit programs (including cyber, IS/IT security, data centers, networks, applications)
• Lead IT audit teams, review and document findings, prepare reports for Management and Chief Internal Auditor
• Liaise with internal and external stakeholders, including regulators, external auditors and consultants
• Manage remediation follow-up, track corrective actions and support implementation of recommendations
• Oversee third-party IT risk reviews and vendor audits; draft Risk Control Matrices and audit checklists
• Provide guidance on IT general controls, application controls, continuous monitoring and automated testing

Apply online via the recruitment portal: www.sidathyder.com.pk/careers. Candidates must apply online within 10 working days from the date of publication of the advertisement. Applications received after the due date will not be considered.