Senior Manager, Information & Communication Technology Audit, ICC

Company Name: BRAC Bank PLC

Location: Dhaka

Job Type: Full-Time

Workplace Type: Full-time

Job ID: IJOB202664908

BRAC Bank PLC is building the future of banking in Bangladesh through trust, innovation, and inclusion. As a values-based financial institution, the bank empowers customers and businesses with responsible financial solutions while upholding the highest standards of compliance, governance and transparency. For professionals, BRAC Bank offers a platform where performance, integrity, and innovation thrive together.

The bank is seeking a qualified and purpose-driven professional for the following position within its Internal Control and Compliance Division:

Job Grade: AVP

Key Responsibilities

• Perform end-to-end audits in IT, Information Security, and Cloud Security.
• Identify potential risks in AD, DC, DNS, hypervisors, virtualisation platforms, container-based technologies and databases.
• Design and run data analytics scripts and queries for full-population testing.
• Write and execute SQL queries independently against production databases, including Oracle, SQL Server, MySQL and PostgreSQL.
• Review and perform manual and automated testing to identify functional and operational issues, inconsistencies and security vulnerabilities.
• Identify potential risks related to data security, IT processes, and compliance with regulatory requirements and industry standards.
• Plan and design audit procedures and strategies based on the organization`s specific needs and objectives.
• Conduct audits of IT systems, applications, and processes to assess their effectiveness, security, and compliance.
• Maintain detailed records of audit findings, including vulnerabilities, weaknesses, and recommendations.
• Ensure that the organization`s Technology practices adhere to relevant laws, regulations, and industry standards (e.g., Bangladesh Bank Guidelines, ISO, PCI DSS, SWIFT, NIST).
• Provide recommendations to address identified vulnerabilities and improve IT security and efficiency.
• Stay updated on emerging threats, technologies, and industry best practices to enhance the organization`s cybersecurity posture continually.
  
  

Requirements

• Experience: 8 to 10 years
• Education:
• Skills: it auditing, internal audit, internal auditing, audit planning, it audit, iso 27001 lead auditor, certified internal auditor, security audits, security consulting
  
  

Last Date of Application: 14 October 2026