Assistant Vice President, IT Audit

Job description

Job Summary

The role is responsible for leading and executing risk-based technology and information security audits across the Bank’s operations in London, Paris, and Switzerland . In addition, the role will support the delivery of Group-wide technology and information security audits, contributing technical expertise across infrastructure, cyber security, cloud computing, data management, user access management, and technology operations.

Main Responsibilities

The AVP will independently lead audit assignments, perform risk assessments, evaluate the effectiveness of controls, identify improvement opportunities, and communicate findings to management. The role supports multiple international locations and therefore experience working across different jurisdictions and regulatory environments would be an advantage. The successful candidate must be capable of working both independently and as part of a broader audit team, demonstrating strong analytical, communication, and stakeholder management skills.

While no direct people management responsibilities are associated with this role, the individual is expected to contribute technical expertise, mentor junior team members where appropriate, and support the continuous improvement of audit methodologies and practices.

Education and Experience

Requirements Bachelor degree in Information Technology field or other related subjects. Professional qualifications such as CISA/ CISSP / CIA / CGEIT/ CRISC etc. Minimum of 10 years of experience in IT audit function in a major bank or leading audit firm out of which 4 years in managerial/leadership role Strong experience in IT and information security auditing and/or risk management. Good understanding of technology risks, cyber security controls, cloud technologies, infrastructure, applications and data protection.

Ability to independently plan and deliver audit assignments from scoping through to reporting. Experience supporting audits across multiple countries or international operations. Knowledge of relevant regulatory and industry requirements affecting technology and information security. Strong written and verbal communication skills with the ability to engage technical and non-technical stakeholders.