Associate Vice President - IT Audit

Role Overview

Associate Vice President – IT Audit at RAK BANK. The role is based at RAK BANK and reports to IT Audit leadership.

Role Purpose

Lead and manage the delivery of risk-based IT audits, provide assurance on technology risks, and support the bank's governance framework through independent audit execution, emerging technology assessment, and cross-functional stakeholder engagement.

Key Responsibilities

Audit Planning & Execution

• Take a lead role in planning and executing Technology audits independently end-to-end, including planning, man-day budgeting, and completing pre- and post-fieldwork audit artefacts and reporting within budgeted man-days.
• Contribute to the development of the IT Audit Universe (AU) and assess the completeness of entities, systems, and data across the assigned portfolio in service of the audit plan.
• Lead and deliver annual audit plans, projects, and initiatives.
• Manage planned audits that are part of the pre-approved Annual Audit plan as well as unplanned audits mandated by regulators, balancing competing demands with flexibility and adaptability.

Risk Assessment & Assurance

• Complete and provide commentary on First- and Second-Line Risk Management over IT and Cybersecurity controls, Resilience and Continuity controls, and Emerging Technologies including Blockchain and AI.
• Exercise effective judgment in identifying material gaps while balancing control environment and business maturity considerations.
• Complete assessment of evidence submitted for the closure of Audit action plans and reviewing closure evidence for Findings/Action Plans.
• Monitor market conditions to remain aware of new and emerging risks from macro-economic factors, emerging technologies, and regulatory changes impacting the Group.
• Assess the impact of emerging risks to the Annual Audit Plan and ensure coverage is reprioritized and refocused if required.

Stakeholder Management & Relationships

• Build and maintain effective relationships across teams within the bank at relevant organizational levels.
• Engage across divisions to identify areas facing technology risk challenges and ensure GIA strategy is aligned with the rest of the bank.
• Manage conflicts and maintain strong working relationships with auditees throughout the audit delivery lifecycle.
• Demonstrate effective negotiation and mediation skills that result in positive outcomes for the audit while enhancing cross-functional relationships between auditee and auditor.
• Prepare and present complex risk commentary to senior executives with clear analytical thinking and messaging.
• Upward manage the Head of Technology Audit, providing timely insight on material outcomes and upcoming challenges, including views on challenges, viable alternative solutions, forward plans to deliver key tasks, effective project and people management, and opportunities for growth and skills development.

Audit Universe & Planning

• Support the audit team in completing Audit Universe (AU) design and annual audit planning.

Transformation & Continuous Improvement

• Participate in and lead different initiatives that aid in GIA's transformation agenda, including adoption of new workflow tooling, skills enhancement and teach-in sessions, and development of new testing strategies and approaches via adoption of AI and data analytics.
• Recommend opportunities to enhance and improve existing audit and operational activities to bring about enhancements that lead to efficient operations and remove procedural inertia.
• Drive continuous improvement in support of the strategic view and objectives for GIA and collaborate with other departmental Heads and Vice Presidents to deliver leading edge business solutions.

Professional Development & Leadership

• Lead and mentor junior staff, identifying skills gaps and supporting motivation and development.
• Be a self-starter and take on training journeys to improve professional skills and competence with regards to career goals while ensuring these align with department needs.

Qualifications & Experience

• Bachelor's or Master's degree in Computer Science, Information Systems Management, Accounting, or other related fields.
• At least 10–12 years of experience in Audit or Information Security within Banking and Financial institutions.
• Experience of having worked with UAE or Regional GCC Banks is advantageous.
• One or more industry-recognized audit, security, cloud, or emerging technology professional certifications such as CISA, CISSP, CRISC, CIA, CCSP, AAIA, or ISO 42001.
• Excellent understanding of local laws, regulations, international frameworks, and best practices.
• In-depth knowledge of audit principles, practices, methodologies, best practice, and latest IIA standards and developments.
• Experience of leading and delivering annual audit plans, projects, and initiatives.
• Experience of liaising with and building strong, credible, and effective working relationships with senior stakeholders.
• Experience of having prepared and presented complex risk commentary to senior executives.
• Experience of effective negotiation and mediation skills that result in positive outcomes for the audit and enhance cross-functional relationships.

Skills & Competencies

Technical

• Specialist knowledge of IT infrastructure, Networking, Information security, Cloud security, Data Security, Blockchain and Cryptocurrency, Artificial Intelligence, and Risk management.

Interpersonal

• Oral and written communication.
• Relationship development and management.
• Organization and time management.
• Adaptability and multi-tasking.

Management & Leadership

• Negotiation and influencing.
• Thought leadership.
• Project management.
• Department and team management.
• Skills gap identification.
• Junior staff motivation and development.
• Effective project management, delegation, and mentoring skills.