ICT Audit Specialist

Fixed term contract

Dhaka

Employment term Contract

Category IT security/Networks

Apply now

Job description:

The ICT Audit Specialist will be responsible for conducting a comprehensive audit of the organization’s existing ICT infrastructure, systems, applications, security controls, and governance framework for a duration of two months. The consultant will assess the effectiveness of current ICT practices, identify gaps and vulnerabilities, evaluate compliance with industry standards and best practices, and provide actionable recommendations to strengthen ICT governance, security, and operational resilience. The specialist will also develop a structured ICT Audit Framework to support future audit and compliance activities.

Job responsibilities

Conduct a comprehensive ICT audit of existing ICT infrastructure, systems, applications, and operational processes.
Assess ICT governance structures, policies, strategies, and management practices.
Review and evaluate enterprise architecture, system design, and technology deployment against industry best practices.
Perform application security assessments to identify vulnerabilities, risks, and control weaknesses.
Conduct infrastructure security audits covering networks, servers, databases, cloud environments, and endpoint systems.
Evaluate existing ICT security and cybersecurity controls, policies, and incident management practices.
Perform security audits and gap assessments of current ICT systems, architecture, and security frameworks.
Assess compliance with relevant ICT governance, information security, risk management, and regulatory requirements.
Identify security risks, operational weaknesses, and areas for improvement.
Prepare a comprehensive ICT Audit Report.
Develop a structured ICT Audit Framework, methodology, and guidelines to support ongoing audit and compliance initiatives.
Present audit findings and recommendations to management and relevant stakeholders.
Perform any other relevant tasks required for the successful completion of the assignment.

Required qualifications

Master’s Degree in Mathematics, Statistics, Physics, Information and Communication Technology (ICT), or a related discipline from an internationally reputed academic institution; or
Bachelor’s Degree in Computer Science and Engineering (CSE) from an internationally reputed academic institution.
The candidate must possess Certified Information Systems Auditor (CISA) certification and Certified Information Security Auditor certification, or an equivalent internationally recognized information security auditing certification.
Minimum 10 years of extensive professional experience working in advanced countries, preferably in North America or Europe.
Demonstrated experience in conducting ICT audits, information systems audits, cybersecurity assessments, and security compliance reviews.
Proven expertise in ICT governance, enterprise architecture, risk management, information security, and cybersecurity frameworks.
Experience in assessing large-scale ICT infrastructures, applications, and technology environments.
Strong understanding of international standards and best practices related to ICT governance, information security, cybersecurity, and audit methodologies.
Experience in developing business strategies for financial institutions.
Experience working with banking, financial services, or other highly regulated sectors will be considered an advantage.
Proven ability to prepare comprehensive audit reports, risk assessments, and strategic recommendations for senior management.