Senior Manager - IT & Info Sec Audit & Assurance Coordinator - Nations Trust Bank Colombo 02

About the job

Are you a seasoned IT audit professional with a passion for governance and compliance? We’re looking for a dynamic individual to lead and coordinate all IT and InfoSec audit activities, acting as the key bridge between auditors, IT teams, and regulators.

Job Profile

• Act as the central liaison for all IT and InfoSec audits, coordinating with internal/external auditors and regulatory bodies including the Central Bank of Sri Lanka.
• Mediate between auditors and IT teams, ensuring alignment between audit findings and the bank’s risk appetite, while balancing technology cost and effort.
• Understand the bank’s business model and underline IT Technologies (IT operational, Infrastructure, IT Security & IT Governance) and should be able to align the organization’s risk concerns with industry’s best practices in order to mediate discussions between auditors.
• To facilitate Lead audit engagements by organizing kick-off meetings, walkthroughs, evidence collection, and stakeholder briefings.
• Track and report audit findings, remediation plans, and closure status to CIO, CISO, and relevant committees.
• Maintain robust audit documentation and ensure readiness for recurring and surprise inspections.
• Drive continuous improvements in audit processes and regulatory responsiveness in collaboration with IT and InfoSec teams.
• Support regulatory reporting and contribute to compliance dashboards and risk assessments.

Special Skills:

• Strong understanding of IT operations, infrastructure, cybersecurity, and governance.
• Hands-on exposure is essential in discharging the duties of the role with specific exposure to;

                        a. IT operations

                        b. IT Infrastructure

                        c. IT GRC

                        d. Information Systems Audit

                        e. Cyber security

• Excellent knowledge of risk matrixes, risk evaluation frameworks, and regulatory standards (CBSL, ISO, NIST).
• Hands-on experience with GRC platforms and audit management tools.
• Strong communication and stakeholder management skills, with the ability to rationalize technical matters to non-technical audiences.
• Project management skills with the ability to manage multiple concurrent audits.

Experience & Qualification:

• Minimum 8 years of experience, out of which 5 years at a managerial level in the financial industry with exposure to IT operations, infrastructure, GRC, audit, and cybersecurity.
• Bachelor’s degree in information technology, Cybersecurity, or a related discipline (as defined by CBSL). A master’s degree is preferred.
• Professional certifications such as CISA, CISSP, CISM, or CRISC are highly desirable.