Job Title            :    IS Quality Assurance, Governance System Control

Grade Level     :    Junior - Intermediate Level

Reports To        :   Team Lead, Information Systems Control

Job Overview: To support the enforcement and continual improvement of IT governance, quality assurance, and change control processes across the bank’s IT operations. This role ensures that changes to IT systems are effectively controlled, service management complies with SLAs, and risk-based reviews are conducted to prevent unauthorized activities and maintain high availability of IT services. The officer will ensure operational adherence to quality benchmarks, policy standards, and regulatory requirements in line with the bank's control framework.

Subject

Description

Key Responsibilities

For IT Governance, Quality Assurance, and Change Control processes activities in the entire Bank:

1. Quality Assurance & Governance Monitoring

1. Interpret and enforce internal IT quality standards and policies across project lifecycle and IT operations.
2. Conduct periodic assessments to verify that SOPs for IT processes and controls are up to date and reflect actual practices.
3. Review and provide control requirement for Business Requirement Document.
4. Assess business requirement documents (BRDs) to ensure that control requirements are adequately defined and embedded.
5. Validate the effectiveness and sufficiency of test plans, test cases, and test results during User Acceptance Testing (UAT) prior to go-live.
6. Inspect and evaluate sample configurations and deployment documentation for new/updated systems to ensure alignment with approved business and control requirements.
7. Maintain documentation of control observations, compliance issues, and quality assurance reviews for management attention.

2. Change Control & Configuration Compliance

1. Validate that a comprehensive and risk-classified inventory of all software and systems is maintained and monitored.
2. Ensure change requests are properly initiated, documented, risk-evaluated, and approved through the Change Advisory Board (CAB) process.
3. Confirm that standardized and securely configured images are used in system builds and that any deviations are documented and justified.
4. Follow up on post-implementation reports for all approved changes within 7 business days and review activity logs to confirm conformity with the approved change scope.
5. Analyze file integrity monitoring (FIM) alerts to detect unauthorized or unapproved configuration or system parameter changes.
6. Evaluate and ensure that adequate logging is activated at both application and operating system levels during all change implementations.

3. Service Management & Operational Control

1. Monitor the IT Service Desk/fault register to ensure incidents and service requests are tracked and updated regularly.
2. Review the business requirement document (BRD) to ensure that Internal Control requirements have been adequately captured and incorporated.
3. Review SLAs for incident resolution and confirm compliance with agreed turnaround times.
4. Analyze incident logs to identify recurring problems and recommend long-term solutions.
5. Confirm that IT service delivery follows documented incident and problem resolution procedures.
6. Validate monthly status reports from IT service functions for completeness and usefulness in control assessments.

4. Security & Compliance Review

1. Check that only authorized applications are installed and run through effective software whitelisting mechanisms.
2. Confirm prompt deployment of critical security patches for operating systems and applications within 48 hours of release.
3. Review configuration baselines and validate that group policies (GPOs) and other configuration management tools (e.g., Puppet) are effectively applied on endpoints and servers.
4. Verify that secure mobile device management procedures (including remote wiping and selective wiping) are in place and consistently enforced.

5. Reporting & Stakeholder Engagement

1. Prepare weekly and monthly reports detailing findings, exceptions, risks, and status of corrective actions.
2. Collaborate with relevant IT and business units during change implementations and service disruptions to ensure quality standards are not compromised.
3. Participate in training and knowledge-sharing sessions related to IT quality assurance and governance.

Systems under Control Scope

Key Performance Indicators

1. Core Banking Application (Finacle)
2. Card Management & Switching Platforms (e.g., FEP, Mastercard, Verve)
3. E-Channels Platforms: Internet Banking, USSD, Mobile Banking, Remita, PayDirect, NEFT, RTGS, CTS, Rapid Transfer, MoneyGram, Western Union
4. Oracle and MSSQL Databases
5. UNIX/Linux and Windows Operating Systems

Ensure proper oversight on all activities of E-Channels, Switching, Applications and Databases Control.

This position will support the Team Lead, IS Control.

Zero fraud and operational losses due to control lapses in E-Channels, Switching, Applications and Databases Control.

1. Percentage reduction in preventable fraud incidents linked to database or application misuse.
2. Number of access exceptions or violations detected and remediated.
3. Compliance rate with password, logging, and privileged account management standards.
4. Service delivery index on incident resolution and control reports.
5. Timeliness and accuracy of control review reports submitted.
6. Audit rating and closure rate of control-related issues.

Key Attributes & Competencies

1. Strong knowledge of Oracle, MSSQL, and system-level access controls.
2. Familiarity with switching systems and e-channels platforms.
3. Understanding of SIEM tools and log analysis techniques
4. Analytical thinking and investigative skills.
5. Attention to detail and ability to work independently.
6. Proficiency in Microsoft Office, scripting, and audit data analysis tools.

Job Qualification

• HND / bachelor’s degree in computer science, Information Systems, or related field.
• Professional certifications (e.g., CISA, CISM, ISO 27001, Oracle DBA, CEH) are an added advantage.
• Minimum of 2 years’ experience in IT quality assurance, system control, IT audit, or database administration.