Associate Mgr., Information & Communication Technology Audit
Read straight from BRAC Bank's careers page, verified 10h ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationUnknown
SeniorityMid
Experience4–5 yrs
Company size1,001–5,000 people
First seenOct 18, 2026 · 2w ago
Verified live10h ago
At a glanceSummarised by Seekless from the posting.
Perform end-to-end audits in IT, Information Security, and Cloud Security
Identify potential risks in AD, DC, DNS, Hypervisor, Virtualization platform, Container based technology and databases
Ability to write and execute SQL queries independently against production databases
Identify potential risks related to data security, IT processes, and compliance
Plan and design audit procedures and strategies
Conduct audits of IT systems, applications, and processes
Maintain detailed records of audit findings
Ensure organization's IT practices adhere to relevant laws, regulations, and industry standards (e.g., BB ICT and Cloud Guidelines, ISO 27001, PCI DSS)
Provide recommendations and action plans to address vulnerabilities
Communicate audit findings and recommendations to stakeholders
Stay updated on emerging threats, technologies, and industry best practices
Keeping updated about banking knowledge, BB guidelines, circulars, auditing standards
Adequately analyze, assess, and evaluate risk of IT and Information security systems
Conduct data analysis using Computer-Assisted Audit Technique (CAAT)
Master/bachelor's degree from a reputed university in Computer Science/IT/related fields
At least four-five years of relevant experience
Sound analytical skills
Knowledge of risk management and business continuity
Stay up to date with the latest IT security and vulnerability management practices
Sound knowledge in agile/DevSecOps process
Quickly adapt to dynamic and challenging environment
Be customer-centric, team player, and keen to develop others
Relevant professional certifications from ISACA, ISC2, IIA, EC-Council, RHCE, CEH, ITIL, etc.
Skills
IT
Information Security
Cloud Security
AD
DC
DNS
Hypervisor
Virtualization platform
Container based technology
SQL
Oracle
SQL Server
MySQL
PostgreSQL
Computer-Assisted Audit Technique (CAAT)
agile
DevSecOps
Responsibilities
1)
Perform end-to-end audits in IT, Information Security, and Cloud Security from initiation / risk assessment, planning, development of work program and execution, and reporting.
2)
Identify potential risks in AD, DC, DNS, Hypervisor, Virtualization platform, Container based technology and databases.
3)
Ability to write and execute SQL queries independently against production databases (Oracle, SQL Server, MySQL/PostgreSQL)
4)
Identify potential risks related to data security, IT processes, and compliance with regulatory requirements and industry standards.
5)
Plan and design audit procedures and strategies based on the organization’s specific needs and objectives.
6)
Conduct audits of IT systems, applications, and processes to assess their effectiveness, security, and compliance.
7)
Maintain detailed records of audit findings, including vulnerabilities, weaknesses, and recommendations.
8)
Ensure that the organization’s IT practices adhere to relevant laws, regulations, and industry standards (e.g., BB ICT and Cloud Guidelines, ISO 27001, PCI DSS).
9)
Provide recommendations and action plans to address identified vulnerabilities and improve IT security and efficiency.
10)
Communicate audit findings and recommendations to relevant stakeholders, including management and IT teams.
11)
Stay updated on emerging threats, technologies, and industry best practices to enhance the organization’s cybersecurity posture continually.
12)
Keeping updated about banking knowledge, BB guidelines, circulars, auditing standards, changing/ amendment of law/regulations etc.
13)
Adequately analyze, assess, and evaluate the risk of IT and Information security systems and applications.
14)
Conduct data analysis using suitable Computer-Assisted Audit Technique (CAAT).
Requirements
· Master/bachelor’s degree from a reputed university in Computer Science/IT/related fields.
· At least four-five years of relevant experience.
•
Relevant professional certifications from ISACA, ISC2, IIA, EC-Council, RHCE, CEH, ITIL, etc.
•
Experience in IT and banking IT Systems.
•
Sound analytical skills.
•
Knowledge of risk management and business continuity.
•
Stay up to date with the latest IT security and vulnerability management practices.
•
Sound knowledge in agile/DevSecOps process.
•
Quickly adapt to the dynamic and challenging environment.
Be customer-centric, team player, and keen to develop others