CDH Investment Bank Limited
CDH Investment Bank is seeking a dynamic and results-driven professional to join the team as Cyber Security and ICT Internal Auditor, tenable at Head Office in Blantyre.
About CDH Investment Bank
CDH Investment Bank, licensed under the Banking Act by the Reserve Bank of Malawi, is a leading specialist bank providing investment banking, corporate and financial advisory and trading of financial securities to a select niche market.
Role summary
The Cyber Security and ICT Internal Auditor will be responsible for planning and conducting audits and advisory work in line with the International Standards for the Professional Practice of Internal Auditing (the “Standards”), the CDH Investment Bank’s (the “bank”) Internal Audit Policies and Procedures Manual, specifically related to ICT/fintech systems and cyber security internal control.
Key responsibilities
- Identify risk areas, develop and execute comprehensive audit plans for information systems/cyber security in line with Internal Auditing Standards.
- Ensure the bank’s ICT and cybersecurity practices comply with financial regulations, local banking laws and the banks policy and procedures.
- Conduct penetration tests, vulnerability assessments, assist with disaster recovery testing including assessments of the bank’s resumption site and risk analysis to identify security gaps.
- Evaluate the security of the bank’s systems including digital platforms, online banking systems, mobile applications and payment gateways.
- Prepare detailed audit reports.
- Review ICT projects to access the effectiveness of the controls at the project initiation, design, data migration, implementation and completion phases.
- Recommend strategic enhancements to the bank’s ICT and cybersecurity frameworks.
- Conduct special assignments as may be assigned by the Internal Audit Manager from time to time.
Key qualities & skills
- Very focused and able to pay attention to detail
- Ability to identify issues, formulate opinions, make conclusions and recommend value adding solutions. Planning and organisational capability required
- Ability to work independently; commitment to continuous learning, self-improvement and willingness to keep up to date with new developments in the field of auditing, ICT, cybersecurity and the banking industryGood interpersonal, written and oral communication skills
- Ability to demonstrate good judgment and a strong learning curve to understand the bank’s business processes.
Qualifications and experience
- Bachelor’s degree in information technology, cybersecurity, computer science, or a related field from a reputable University
- Professional certifications such as CISA, CISSP, CISM, CRISC or CEH are strongly preferred
- At least three years cyber security/ICT audit or related experience
- In-depth knowledge of network routing, firewalls, intrusion detection systems, internet filtering, anti-virus technology, application security, secure email gateways, PCI and GLBA compliant environments.
Remuneration
A competitive remuneration package, commensurate with the role’s seniority, skills and experience, will be offered to the successful candidate.
Method Of Application
Interested persons who meet the minimum requirements outlined above may forward applications in person, by post or email to the address below, to be received no later than close of business on 28 March 2025.
Qualified and interested candidates should submit their applications, including:
- A detailed curriculum vitae.
- Certified copies of academic qualifications.
- A certified copy of a valid national identity document or passport.
- Contact details for three professional referees.
Please note applications that do not meet all the requirements specified above will not be considered. Only shortlisted applications will be acknowledged.
Chief Executive Officer/Managing Director
CDH Investment Bank Limited
PO Box 1444
Blantyre, Malawi
Email: recruitment@cdh-malawi.com