Head of Digital Audit Based in Maldives - Bank of Maldives - #2172969

Bank of Maldives (BML) is the leading financial institution in the Maldives, providing a wide range of personal, business and corporate banking services through its extensive branch network and digital banking channels.

As the Bank continues to advance its digital capabilities, BML is seeking an experienced Head of Digital Audit to lead its Digital Audit function within Internal Audit. The role will oversee independent, risk-based audits of the Bank’s technology infrastructure, digital systems, cybersecurity and governance, while providing insights to strengthen controls and manage emerging technology risks.

Working closely with the Director of Internal Audit, the successful candidate will play a key role in developing the function in line with regulatory requirements and industry best practices.

As the Head of Digital Audit you will:

1. Develop and implement a comprehensive, risk-based digital and IT audit plan, strategically aligned with the overall internal audit plan and the bank's "Digital First" strategic focus.
2. Proactively identify and incorporate emerging risks in the evolving digital and cybersecurity landscape, including those associated with new digital products and channels, process enhancements through digitalization, and the strategic adoption of emerging technologies such as Artificial Intelligence (AI), Machine Learning (ML), and Blockchain, into the audit universe.
3. Contribute significantly to the strategic direction of the Internal Audit Division from a technology perspective, ensuring early-stage engagement and insights into digital initiatives and product design.
4. Prepare RFPs for outsourcing/co sourcing of Digital Audits where required.
5. Develop and oversee Continuous auditing initiatives and provide digital risk support other audit engagements.
6. Perform any other related duties assigned by management of Internal Audit Department.
7. Oversee the rigorous execution of Digital audits covering areas such as Core Banking Systems, IT General Controls (ITGC), Cybersecurity and Data Protection, Digital Project Management and System Development Life Cycle (SDLC), Business Continuity and Disaster Recovery, Cloud Computing, and Vendor Risk Management, with an enhanced focus on complex digital processes, automated controls, and AI deployments.
8. Supervise digital audit staff, ensuring work is performed according to internal standards and evolving regulatory requirements, and promote a data-driven auditing approach.
9. Oversee and champion the data analysis function of the Digital and system Audit Unit, leading the development of sustainable and re-usable data analytics models and programs to improve the efficiency and coverage of the Internal Audit Department (IAD), including continuous monitoring scripts for critical digital areas.
10. Evaluate the adequacy and effectiveness of digital system controls and governance structures, with a specific emphasis on assessing the integrity and resilience of new digital products, channels, and processes enhanced by digitalization.
11. Identify control gaps, assess risk exposures, and recommend targeted corrective actions to improve control environments, focusing on mitigating risks introduced by emerging technologies and complex digital ecosystems.
12. Stay abreast of evolving IT and digital risks, including the growing danger of fraud schemes fuelled by Generative AI and other advanced technological threats, and changes in technology that could impact the organization's risk profile.
13. Prepare wholistic analysis of the Bank wide systems framework and digital infrastructure and its integration and data framework.
14. Prepare high-quality, concise audit reports with clearly articulated findings, root causes, and risk implications (including specific digital, System, and fraud risk dimensions), providing actionable recommendations relevant to the bank's digital transformation.
15. Engage proactively with senior management, Risk and Compliance committees, IT leadership, and other key stakeholders to discuss audit findings, monitor action plans, and provide early-stage insights and consultative guidance on control design and risk mitigation for new digital initiatives.
16. Provide essential input into Audit Committee reporting related to System and digital risks, highlighting trends, concentrations, and systemic issues arising from the bank's digital footprint.
17. Provide early-stage consultancy services to project teams on digital and IT risk, system controls, and best practices, maintaining audit independence while proactively embedding controls from the design phase of new digital products, channels, and major digitalization initiatives.
18. Actively assist in major investigations of internal and external fraud, particularly those leveraging advanced digital tools and AI, as requested by the Chief Internal Auditor, contributing to enhanced fraud prevention and detection strategies.
19. Participate in the Bank’s Risk forums to provide forward-looking insights on emerging technological and digital risks and contribute to the overall enterprise risk management program.
20. Annually Prepare and update the Internal Audit Department IT strategy aligned with the bank IT Strategy.
21. Oversee the provision of continuous training and upskilling of the Internal Audit Department staff on detecting and managing risks related to information security, emerging digital technologies, and AI, fostering a culture of continuous professional development in these rapidly evolving areas.
22. Provide in-house training on IT audit methodologies, data analytics (e.g ACL) and emerging Digital risks.
23. Stay informed of global industry trends, technological advancements, and regulatory updates relevant to digital banking and AI, to proactively address potential risks and adapt audit methodologies.
24. Support or lead the Internal Audit Quality Assurance and Improvement Program (QAIP), ensuring that methodologies and practices for digital and IT audits align with international best practices and regulatory expectations.

To be successful in this role you will ideally have:

1. Bachelor’s degree in Information System, Computer Science, Cybersecurity, or a related field
2. Professional certifications such as CISA (required),CIA, CISSP, or CRISC (strongly preferred)
3. Minimum of 8–10 years of experience in IT audit or IT risk management, with minimum 3 years in a leadership or supervisory role, preferably in a financial institution
4. Experience with audit analytics tools such as ACL

Deep Technical Acumen: