Head of Internal Audit - Banking

About the role

The bank is establishing an in‑house Internal Audit function and needs a senior leader to drive the transition, design the audit framework and provide independent assurance across all risk areas.

Key responsibilities

• Lead the hand‑over from the outsourced provider and present a roadmap for structure, staffing, co‑sourcing, methodology and tools to the Board Audit Committee.
• Develop and maintain the Internal Audit Charter, methodology and a risk‑based multi‑year audit plan in line with FSRA and IIA standards.
• Coordinate with the Financial Services Regulatory Authority (FSRA) and external auditors to ensure comprehensive assurance coverage and closure of findings.
• Provide independent review and assurance over ICAAP, ILAAP, IRAP, capital, liquidity (LCR, NSFR), large exposures, profit‑rate risk, and the operational risk framework.
• Conduct credit audits for Corporate and SME financing and report results to the Board Audit Committee.
• Assure treasury, financial reporting (including IFRS 9 ECL), fraud, conduct, HR governance and the effectiveness of risk management across first and second lines of defence.
• Audit AML/CFT, sanctions, CDD, transaction monitoring, screening and MLRO functions against FSRA AML Rulebook.
• Oversee internal Shari’ah reviews under FSRA Islamic Finance Rules and coordinate with the Shari’ah Supervisory Board.
• Provide assurance on technology governance, core banking, digital channels, cyber security, data management, cloud, change management and AI/ML/ECL models.
• Review outsourcing and third‑party arrangements for compliance with FSRA outsourcing requirements and business continuity.

Required profile

• Extensive experience in internal audit within banking or financial services, preferably in the UAE or similar regulatory environment.
• Proven ability to lead large‑scale transitions from outsourced to in‑house audit functions.
• Deep knowledge of FSRA requirements, IIA standards and prudential frameworks (ICAAP, ILAAP, IRAP).
• Strong understanding of AML/CFT, Shari’ah compliance, technology risk and cyber security.

Required skills

• IAM documentation and access‑control policies, user access matrices, role definitions and audit trails.
• Risk‑based audit planning and execution.
• Regulatory reporting standards (IFRS 9, LCR, NSFR).
• Cyber security, data management, cloud governance.
• AI/ML model validation and ECL modelling.