Information System (IS) Auditor

Information System (IS) Auditor – CBC Finance PLC

Job Overview

CBC Finance PLC is inviting applications from experienced IT audit professionals for the position of Information System (IS) Auditor (Assistant Manager / Manager). This is an excellent opportunity to join one of Sri Lanka’s leading finance companies and play a key role in strengthening information systems controls, cybersecurity, governance, and risk management.

Position Details

Job Title: Information System (IS) Auditor (Assistant Manager / Manager)

Company: CBC Finance PLC

Employment Type: Full-Time

Job Location: Colombo, Sri Lanka

Category: Banking & Insurance, IT & Software

Application Closing Date: Within 14 days from the date of advertisement

Company Overview

CBC Finance PLC, a fully owned subsidiary of Commercial Bank of Ceylon PLC, is one of Sri Lanka’s leading finance companies. The company provides a wide range of financial products and services while maintaining high standards of corporate governance, information security, and operational excellence. CBC Finance offers rewarding career opportunities for professionals seeking growth in the financial services industry.

Qualifications & Experience

Applicants should possess:

• A Degree in one of the following fields from a recognized university:
  • Information Technology (IT)
  • Computer Science
  • Information Systems
  • Or a related technology discipline.
• Certified Information Systems Auditor (CISA) qualification OR a Diploma in Information Systems Auditing (DISSA) is mandatory.
• Extensive experience in IT Audit and Information Security.
• Experience in leading and managing a team of qualified IS Audit professionals within a banking or financial institution.
• Willingness to travel to branch locations for system audits.
• Ability to work flexible hours to meet audit timelines.

Key Responsibilities

• Prepare and submit the Annual IS Audit Plan for the Information Systems Audit Unit.
• Execute and oversee branch and departmental IS audit plans, covering:
  • IT security
  • Core banking systems
  • Application controls
  • IT general controls
• Manage technical audit resources to ensure timely completion of audit assignments.
• Monitor and follow up on technical audit findings until satisfactory resolution.
• Prepare and present structured reports on unresolved IS audit and cybersecurity issues to senior management.
• Continuously review and update IS audit programmes to address evolving technologies, cybersecurity threats, and regulatory requirements.
• Ensure compliance with internal audit standards and organizational governance policies.

Required Skills

• Strong knowledge of IT auditing principles and methodologies.
• Excellent understanding of information security and cybersecurity controls.
• Experience with banking systems and IT governance frameworks.
• Strong analytical and risk assessment skills.
• Excellent leadership and team management abilities.
• Effective report writing and presentation skills.
• Strong communication and stakeholder management skills.
• Ability to manage multiple audit assignments while meeting deadlines.

Salary & Benefits

• Attractive remuneration package.
• Competitive fringe benefits comparable with benchmark financial institutions.
• Opportunity to work with one of Sri Lanka’s leading finance companies.
• Professional career growth and development opportunities.
• Dynamic and collaborative working environment.

How to Apply

Interested candidates should forward their Curriculum Vitae (CV) together with the details of two non-related referees via email.

Email: careers@cbcfinance.lk

Applications should be submitted within 14 days from the date of the advertisement.

Important Notes

• CISA qualification or DISSA is mandatory for this position.
• Applicants should possess substantial experience in IT Audit and Information Security within the banking or financial sector.
• Candidates should be willing to travel to branch locations for system audits.
• Include details of two non-related referees with the application.
• Only shortlisted candidates will be contacted for the recruitment process.