JOB SCOPE

To plan and execute the audits related to Data Analytics & Cybersecurity to ensure compliance with laws, regulations, and industry standards. Assess and test IT controls to identify weaknesses or deficiencies in the IT infrastructure and systems. Provide assurance, consultancy and recommendations on control deficiencies to the audit, risk & committee.

ACCOUNTABILITIES

• Assess the accuracy, consistency, and compliance of data across IT systems, identifying gaps that may impact operations or compliance.
• Review tools and processes used for operational, financial, and security data analysis, ensuring they provide timely, accurate insights for decision-making.
• Audit the use of big data analytics and predictive models, ensuring their accuracy and reliability in areas like forecasting and resource optimization.
• Review data privacy policies and compliance with GDPR, local laws, and security frameworks, ensuring proper protection of sensitive data.
• Evaluate the effectiveness of cybersecurity measures (e.g., firewalls, encryption, intrusion detection) and compliance with standards like ISO 27001 and aviation security regulations.
• Lead penetration tests and vulnerability assessments to identify security weaknesses, and review patch management processes.
• Audit the cybersecurity incident response plan and monitoring systems, ensuring protocols for responding to security incidents are in place.
• Conduct regular risk assessments, identify cybersecurity threats, and recommend mitigations to minimize operational impact.
• Manage and execute special assignments related to Data Analytics & Cyber Security as requested by audit management.
• Present audit findings to audit senior management and CAE and provide recommendations to related stakeholders when required to ensure controls and operations are efficiently and effectively maintained.
• Follow up on recommendations and generate progress report on implementation of recommendations based on agreed upon timeline.
• Manage the contribution to the identification of opportunities for continuous improvement of systems, processes and practices taking into account ‘leading best practices’, improvement of business processes, cost reduction and productivity improvement.

QUALIFICATIONS AND EXPERIENCE

• Bachelor’s degree in computer science, Information Systems, IT or any relevant field. Master’s degree is a plus.
• Minimum of 7-10 years of related work experience in IT audit with 3 - 4 years in supervisory level, preferable in aviation sector.
• CISA or equivalent International Professional Certification in Information Security Audit.
• Excellent leadership, mentoring and communication skills.

SKILLS AND COMPETENCIES

• Strategic thinking
• Leadership
• Problem solving
• Attention to Detail
• Negotiation
• Influencing
• Results focus
• Communication
• Situational awareness
• Teamwork