Technology Auditor – Digital Platforms & DevOps

About the role

We are looking for a senior Technology Auditor to join our Internal Audit function in Egypt. You will independently assess the effectiveness of IT controls, digital frameworks, and technology‑enabled processes across the bank, ensuring compliance with internal policies, regulatory requirements, and cybersecurity standards.

Key responsibilities

• Plan, lead and execute audits of digital platforms, DevOps pipelines and business banking systems.
• Assess IT general controls (ITGCs), application controls and cybersecurity frameworks.
• Develop audit plans, identify key technology risks, and evaluate cloud, API and system‑integration initiatives.
• Review DevOps processes, including CI/CD pipelines, release management, change controls and automation.
• Identify control weaknesses, security gaps and operational inefficiencies, and recommend remediation actions.
• Prepare detailed audit reports with risk ratings and actionable improvement plans.
• Validate closure of audit findings and support technology‑related projects and digital product launches.
• Engage with IT, Digital and Business Banking stakeholders to shape the annual audit plan and technology audit universe.

Required profile

• Bachelor’s degree in IT, Computer Science, Engineering or related field (Master’s preferred).
• Professional certifications such as CISA, CISSP, CIA or equivalent.
• 7‑10 years of experience in IT/Technology Audit within banking or financial services.
• Strong knowledge of digital banking platforms, online/mobile channels and business banking systems.
• Hands‑on experience with DevOps environments, agile methodologies and automated controls.
• Solid understanding of cybersecurity principles, cloud computing and API security.
• Familiarity with regulatory frameworks, IT governance and data‑protection standards (ISO 27001, NIST).
• Proven ability to lead audits and interact with senior technology and business stakeholders.

Required skills

• CI/CD pipelines
• Agile methodologies
• Cloud computing
• API security
• Cybersecurity frameworks
• IT general controls (ITGC)
• ISO 27001
• NIST standards