IS Auditor

IS Auditor – HNB Finance PLC

Looking for an exciting Information Security Auditor job in Sri Lanka? HNB Finance PLC is inviting applications for the position of IS Auditor. This opportunity is ideal for experienced IT Audit and Information Security professionals who are passionate about strengthening cybersecurity, governance, and internal controls within a leading financial institution.

Job Overview

HNB Finance PLC is seeking a highly motivated IS Auditor to conduct IT audits across core banking systems, applications, and IT infrastructure. The successful candidate will assess information security controls, identify risks, ensure regulatory compliance, and provide practical recommendations to strengthen the organization’s governance and cybersecurity framework.

Job Category:

• IT & Software
• Accounting & Finance
• Private Jobs

Job Location: Colombo District, Sri Lanka

Position Details

Position: IS Auditor

Company: HNB Finance PLC

Industry: Financial Services

Employment Type: Full-Time

Company Overview

HNB Finance PLC is a subsidiary of Hatton National Bank PLC and one of Sri Lanka’s leading finance companies. With over 25 years of excellence, the company offers a wide range of financial services through an island-wide network of more than 76 branches. Recognized among Sri Lanka’s top 100 most valuable consumer brands, HNB Finance continues to deliver innovative financial solutions while maintaining the highest standards of governance and customer service.

Qualifications & Experience

Applicants should possess the following qualifications and experience:

• Bachelor’s or Master’s Degree in Information Security, Computer Science, Information Technology, or a related field (specialization in Information Security preferred).
• Professional qualifications such as CISSP, GIAC, or CISA (completed or partly qualified) will be an added advantage.
• Minimum 2–5 years of experience in IT Audit, Information Security, or a related discipline.
• Previous exposure to the banking or financial services sector will be a definite advantage.
• Good knowledge of IT governance frameworks such as COBIT and ISO 27001, along with internal audit methodologies.
• Familiarity with cybersecurity risks, cloud environments, and digital banking systems will be an added advantage.
• Strong analytical, problem-solving, and communication skills.
• Ability to work independently while managing multiple assignments effectively.

Key Responsibilities

• Conduct IT audits covering core banking systems, applications, and IT infrastructure.
• Assess information security controls, including data integrity, user access management, and cybersecurity controls.
• Identify technology risks and recommend practical improvements to strengthen internal controls.
• Review compliance with regulatory requirements, including CBSL guidelines and internal policies.
• Follow up on audit findings to ensure timely implementation of agreed action plans.
• Prepare audit reports and communicate findings to management.
• Support continuous improvement of IT governance and risk management practices.

Required Skills

• IT auditing and risk assessment.
• Information security and cybersecurity.
• Internal controls and compliance.
• COBIT and ISO 27001 frameworks.
• IT governance and audit methodologies.
• Risk analysis and reporting.
• Critical thinking and analytical skills.
• Communication and stakeholder management.
• Problem-solving and attention to detail.

Salary & Benefits

• Attractive and competitive remuneration package.
• Excellent career development opportunities.
• Exposure to enterprise IT governance and cybersecurity.
• Opportunity to work with one of Sri Lanka’s leading finance companies.
• Professional and collaborative working environment.

How to Apply

Interested candidates should submit their application using the application button provided with this job post.

Email: HRTalentTeam@hnbfinance.lk

Please mention “IS Auditor” in the subject line of your email application.

Important Notes

• Applications should be submitted within 10 days from the date of the advertisement.
• Applicants should include the details of two non-related referees with their application.
• A higher position may be considered based on the candidate’s qualifications and experience.
• Please indicate the position applied for and your preferred location in the subject line of the email.
• Only shortlisted candidates will be contacted for the recruitment process.