Information System Auditor at FCMB

FCMBOyo, Nigeria Networking and Tech Support

Full Time

First City Monument Bank (FCMB) Plc is a full service banking group, headquartered in Lagos, Nigeria, with the vision 'to be the premier financial services group of African origin’. From its early origins in investment banking as City Securities Limited in 1977, FCMB, established in 1982, has emerged as one of the leading financial services institutions in Nigeria and one of the top eight lenders in the country with subsidiaries that are market leaders in their respective segments. FCMB was incorporated as a private limited liability company on 20 April 1982 and granted a banking licence on 11 August 1983. On 15 July 2004, the Bank changed its status from a private limited liability company to a public limited liability company and was listed on the Nigerian Stock Exchange, by introduction, on 21 December 2004. As at December 2013, FCMB had 2 million customers, N1 trillion in assets, over 270 branches in Nigeria and a licensed banking subsidiary in the United Kingdom (FCMB UK) and a representative office in the Republic of South Africa. Having successfully transformed to a retail and commercial banking-led group, the Bank expects to continue to distinguish itself by delivering exceptional service and taking its unique brand of supportive banking to every household in Nigeria.

Role Description

To assist Head Internal Audit in the design and implementation of an effective internal control and audit framework for the bank.
To ensure compliance of Information System controls, protect corporate assets, ensure data integrity and are aligned with the business's overall goals.
To examine and evaluate the Bank technology infrastructure, policies and operations as well as overall business and financial controls that involve information technology systems.
Conduct Audits of IT systems, applications, networks, and infrastructure to ensure compliance with internal policies, external regulations and industry standards, such as data protection and cybersecurity regulations.
Work with the Head, Audit Department to create a solid audit procedure and reporting process.
Coordinate/ Supervise specific audit assignments at the Head Office, as approved in the annual audit plan and as directed by Head Internal Audit Department.
Involved in both the Network and Oracle Database Scanning using Imperva and Network Tools.
Evaluate the effectiveness of controls over system development, change management, data integrity, security administration, and disaster recovery.
Collaborate with stakeholders to understand system workflows, identify control weaknesses, and provide practical solutions.
Conduct ISO 27001:2022 (ISMS) Information Security Management System Audit.
Perform Fraud risk assessments of technology systems in conjunction with your department to determine risk based audit.
Track & Validate observed inadequacies in the Vulnerability and Penetration Testing (VAPT) reports to achieve timely, accurate, complete and reliable information outputs, as well as ensuring confidentiality, integrity, availability and reliability of data and adherence to relevant legal and regulatory requirements.
Prepares and presents written and oral reports and other technical information in a pertinent, concise, and accurate manner for distribution to management.
Identify and assess potential risks associated with the bank’s systems, including cybersecurity threats, data breaches, and system failures.
Provide recommendations for system improvements, process enhancements, and risk mitigation strategies.
Evaluate the Bank’s data management practices, including data security, data quality, and data retention.