UBA Pensions Custodian Limited (UBA Pensions) is a wholly owned subsidiary of UBA Plc, incorporated in September 2005 in accordance with the Pension Reform Act 2014 (as amended).. We are located in an access-controlled and serene environment with high safety and security standards. The quest to be the leading pension fund custodian in Nigeria drives UBA Pensions to develop high quality client services, along with best-in-class technology as key competitive advantages. The company has set itself from an innovative perspective in the custody business as a differentiator amongst its peers.
UBA Pensions is in compliance with the National Pension Commission’s Corporate Governance Code
The IT Auditor will be expected to:
- Develop and execute risk-based IT audit plans aligned with organisational priorities, regulatory expectations, and enterprise risk exposures.
- Conduct audits across IT infrastructure, operating systems, databases, applications, networks, cloud environments, and end-user computing.
- Review and assess the design and operating effectiveness of IT General Controls (ITGCs), including:
- User access management
- Change management
- Backup and recovery controls
- Job scheduling and batch processing
- IT operations and monitoring controls
- Evaluate the adequacy of cybersecurity controls, including endpoint protection, vulnerability management, patch management, incident response, logging, monitoring, and threat detection.
- Review application controls within pension administration systems and related platforms to ensure data integrity, completeness, accuracy, and availability.
- Assess IT governance structures, policies, procedures, and accountability mechanisms for compliance with internal standards and regulatory expectations.
- Examine the adequacy of Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP), including periodic testing and recovery readiness.
- Participate in audits of IT projects, system implementations, upgrades, integrations, and migrations to ensure proper governance, testing, and control assurance.
- Use data analytics and computer-assisted audit techniques to identify anomalies, trends, exceptions, and potential control breaches.
- Prepare clear, concise, and well-supported audit reports that highlight root causes, business impact, risk implications, and actionable recommendations.
- Track audit issue remediation and verify timely closure of agreed management actions.
- Support internal investigations where technology-related issues, control failures, or data irregularities are suspected.
- Provide advisory input to management on control improvements, automation, and auditability of business processes.
- Liaise effectively with IT, Risk, Compliance, Operations, and other key stakeholders to promote a strong control culture.
Candidates must possess:
- A Bachelor’s degree in Computer Science, Information Technology, Information Systems, Engineering, Accounting with a strong technology background, or a related discipline.
- A minimum of 4–7 years relevant experience in IT audit, information systems audit, technology risk, cybersecurity, or related assurance roles.
- Experience in a financial services, pension, banking, insurance, or other regulated environment will be a distinct advantage.
- Demonstrable understanding of IT audit methodologies, control frameworks, and risk-based audit execution.
- Strong analytical skills and the ability to assess systems, processes, and controls objectively.
Professional Certifications
The following certifications will be highly desirable:
- CISA – Certified Information Systems Auditor
- CISM – Certified Information Security Manager
- CRISC – Certified in Risk and Information Systems Control
- ISO 27001 Lead Auditor
- Any other relevant technology, audit, cybersecurity, or risk certification
Technical Competencies
The ideal candidate should have practical knowledge in the following areas:
- IT General Controls (ITGC) testing
- Application controls review
- Network, database, and operating system controls
- Access rights and privileged user reviews
- Vulnerability and patch management
- Incident management and logging review
- IT governance and compliance assessment
- Data analytics for audit and control monitoring
- Audit of cloud-based and hybrid environments
- Familiarity with enterprise systems and control environments
Behavioral Competencies
The successful candidate should demonstrate:
- High level of integrity and professional skepticism
- Strong attention to detail and sound analytical thinking
- Excellent written and verbal communication skills
- Ability to work independently and manage multiple assignments
- Confidence in engaging senior stakeholders
- Strong problem-solving orientation
- Ability to present complex technical issues in clear business language
- Good judgment, resilience, and professionalism
At UBA Pensions, we offer an environment that encourages professional growth, innovation, teamwork, and continuous improvement. The successful candidate will have the opportunity to contribute meaningfully to the strengthening of our governance, technology assurance, and operational excellence agenda.
Interested and qualified candidates should submit their application and updated CV through the organization’s official recruitment channel.
