Manager (Information System Audit)

Job Overview

Job Title: Manager – Information System Audit Company: Merchant Bank of Sri Lanka & Finance PLC (MBSL) Job Location: Colombo, Sri Lanka Job Category: IT & Software, Banking & Insurance, Management, Accounting & Finance, Private Jobs

Merchant Bank of Sri Lanka & Finance PLC (MBSL), a leading finance company and a subsidiary of Bank of Ceylon, invites applications from suitably qualified and experienced professionals for the position of Manager – Information System Audit.

The successful candidate will be responsible for managing information systems audits, evaluating IT controls, identifying risks, ensuring regulatory compliance, and strengthening the organisation’s IT governance and security practices.

Position Details

• Position: Manager – Information System Audit

• Company: Merchant Bank of Sri Lanka & Finance PLC (MBSL)

• Department: Information System Audit

• Employment Type: Full-time

• Closing Date: 16 October 2026

Company Overview

Merchant Bank of Sri Lanka & Finance PLC (MBSL) is a financial services company and a subsidiary of Bank of Ceylon. The company operates in the financial services sector, providing financial and investment-related services.

Qualifications & Experience

• Bachelor’s Degree in Information Technology, Computer Science, Information Systems, or a related discipline.

• Professional qualification such as CISA (Certified Information Systems Auditor) is mandatory.

• CISM (Certified Information Security Manager) or CISSP (Certified Information Systems Security Professional) will be an added advantage.

• Minimum of 3–5 years of experience in Information Systems Audit, IT risk management, or IT controls, preferably within the banking or financial services sector.

• Sound knowledge of IT auditing standards, COBIT, ISO 27001, IT general controls, and application controls.

• Experience auditing core banking systems and financial applications will be an added advantage.

Key Responsibilities

• Develop and manage the annual Information Systems (IS) Audit Plan in line with approved standards.

• Evaluate IT controls, systems, applications, information security, cybersecurity, business continuity, and disaster recovery.

• Ensure compliance with regulatory requirements, internal policies, and Central Bank of Sri Lanka (CBSL) guidelines.

• Identify control weaknesses, assess risks, and recommend practical corrective actions.

• Follow up on audit findings and monitor agreed action plans.

• Coordinate with internal stakeholders, IT teams, external auditors, and regulators.

• Prepare timely and accurate audit reports for Senior Management and the Audit Committee.

• Stay updated on emerging IT risks, technology developments, and regulatory changes.

Required Skills

• Strong IT auditing and risk assessment skills.

• Knowledge of IT governance frameworks and information security standards.

• Understanding of cybersecurity, IT general controls, and application controls.

• Strong analytical and problem-solving abilities.

• Excellent report-writing and documentation skills.

• Good communication and stakeholder management skills.

• Ability to identify risks and recommend effective control improvements.

• Strong organisational skills and attention to detail.

• Ability to work independently and meet deadlines.

Salary & Benefits

• Attractive remuneration package.

• Career progression opportunities.

• Additional employment benefits as determined by the company.

How to Apply

Interested candidates should forward their complete CV, including contact details of two non-related referees, to the following email address within 14 days of the advertisement.

Email: careers.mbsl@mbslbank.com

Applicants should indicate the position applied for in the email subject line.

Suggested email subject: Manager – Information System Audit

Closing Date: 16 October 2026

Important Notes

• CISA certification is mandatory for this position.

• CISM or CISSP qualifications will be an added advantage.

• Applicants should ensure their CV includes relevant qualifications, professional certifications, and work experience.

• Contact details of two non-related referees must be included.

• Applications must be submitted within the specified period.

• Only shortlisted candidates will be contacted for further evaluation.

• Selection will be based on merit.