Manager IT & Infrastructure-SSGC, Karachi

By Sui Southern Gas Company Limited, Karachi  Job Code: 8427-01            Qualification:

• MS Computer Science or MS IT or M CS from HEC recognized university Or BS or B CS with at least 7 years of relevant experience.
• CISA certification shall have added advantage.
  

Experience:

• at least 4 years of relevant experience OR  at least 7 years of relevant experience.

Duties & Responsibilities:

• Provide support in developing internal audit and assurance assignments related to Information Technology systems and infrastructure. Facilitate the GM IT Audit and Technical Operations in implementing IT audit framework, standard templates and checklists in context of approved audit plan across the entire organization. Provide the business and IT management with guidance on IT risk management matters, particularly on applications and infrastructure security.
• Provide support in developing and maintaining IT Risk Assessment at company level, while identifying areas where business units should consider additional investment.
• Manage audits team in conducting IT audits covering system applications and IT processes.
• Prepare the audit results for senior executives and Audit Committee. Manage IT security audits (networks, operating system, and data center), including evaluation of security vulnerabilities.
• Coordinate the scope and performance of these reviews with business units and external security experts.
• Assist GM IT Audit and Technical Operations in preparation of presentations for the Audit Committee to discuss internal audit reports and projections.
•  Conduct review of IT management policies and procedures such as change management, business continuity planning / disaster recovery and information security for the senior management to ensure that controls surrounding these processes are adequate.
• Develop a detailed understanding of the activity under audit, including IT risks and controls and develop IT audit work programs accordingly. Assess IT risks and internal control weaknesses and advise IT and business audited the best practices with respect to their processes. Ensure compliance to the Enterprise Risk Management Framework enforced in the Company while performing job responsibilities in accordance with his assigned role.
• Ensure compliance to the Business Principles and Ethics Policy / Code of Conduct. Identify risks in internal audit observations and communicate to concerned levels of management for risk management.