IT Assurance Officer
Salary not disclosedPosted 1 day ago
Closes in 9 days
About the company
HFC Bank is a financial institution operating in Fiji with a head office in Suva. The bank describes itself as a fast-paced organisation within the financial industry and an Equal Opportunity Employer offering attractive benefits and an environment that invests in its people.
About the role
This role sits within HFC Bank's Information Technology team and reports to the Manager IT Assurance, based at the Suva head office. The IT Assurance Officer tests, reviews, and evaluates IT controls against the bank's IT and Information Security policies, and assesses controls against standards such as PCI DSS, SWIFT, and ISO 27001. The role carries out Key Control Effectiveness testing, supports IT policy and governance reviews, and assists with internal and external audits and compliance attestations. It also covers IT asset tracking and lifecycle management, contract and SLA administration, IT risk and incident register reporting, governance coordination, project governance support, cybersecurity control monitoring, and technical audits of systems and infrastructure.
Key responsibilities
- Testing, reviewing, and evaluating IT controls against the Bank's IT and Information Security policies and procedures.
- Assessing IT controls against standards and regulatory requirements including PCI DSS, SWIFT, and ISO 27001.
- Conducting periodic Key Control Effectiveness (KCE) testing and preparing assurance and control testing reports.
- Supporting the annual review and enhancement of IT policies, procedures, and governance frameworks.
- Assisting with internal and external audits, regulatory reviews, and compliance attestations, including collating and validating audit evidence and monitoring findings through to closure.
- Ensuring IT assets are inventoried, tagged, and subjected to quarterly stocktakes, with timely reporting to Finance, and tracking asset lifecycle including End-of-Life and End-of-Support status.
- Maintaining IT contracts, agreements, SLAs, licenses, and subscriptions, and supporting timely renewals.
- Maintaining and reporting on IT Risk, Incident Management, and Change Management registers, including escalation of IT Risk Appetite Statement metrics.
About the successful candidate
- A Degree in Computing Science, Information Systems, Information Technology, or Cybersecurity with a minimum of two years' experience in IT, Information Security, IT Audit, IT Risk, Compliance, or a related assurance function.
- Alternatively, a Diploma in a related field with at least three years' experience in similar roles.
- Experience in control testing, verification and validation, reporting, data quality management, risk assessment, incident management, and compliance monitoring.
- Knowledge of cybersecurity principles, standards, and best practices is an added advantage.
- Sound understanding of IT governance, risk management, information security controls, and regulatory compliance requirements.
- Strong analytical, problem-solving, investigative, and report-writing skills.
- Excellent attention to detail and the ability to work independently while managing multiple priorities.
- Strong interpersonal and stakeholder engagement skills, with the ability to communicate with technical and non-technical audiences.