FDH Bank Moçambique

IT Internal Auditor — FDH Bank Moçambique (Maputo)

Maputo City Information TechnologyQuota: NACIONAL

See all jobs at FDH Bank Moçambique

Salary: Negotiable

Share this job:

💬 WhatsApp 💼 LinkedIn

About the role

The essentials: Job vacancy for IT Internal Auditor at FDH Bank Mozambique, based in Maputo. Direct hiring by the bank, full-time, on-site. Applications open until October 6, 2026, via email to fdhmz-recrutamento@fdh.co.mz — detailed CV, cover letter, and copies of academic and professional qualifications.

About FDH Bank

FDH Bank Mozambique is part of a financial group with a regional presence. In Mozambique, the bank operates a network of branches across all provinces and offers mobile banking, payments, cards, and other digital channels — the context in which this role operates.

The IT internal audit team supports management in ensuring banking systems run with effective controls. The IT Internal Auditor evaluates governance, cybersecurity, business continuity, and application controls — from Core Banking to digital channels — supporting each conclusion with reliable evidence.

Who we are looking for

Are you looking to evaluate modern banking technology with technical depth?

The role requires an analytical and methodical profile: you will identify and challenge control weaknesses, clearly present risks, and recommend practical solutions. You will work with sensitive banking system data alongside IT, operations, and business teams.

FDH's culture — adaptability, sustainability, transparency and accountability, teamwork, excellence, and respect — guides the team's daily routine. Integrity, objectivity, and confidentiality are essential requirements for this role.

Day-to-day responsibilities

Document the understanding of the technology, system, application, infrastructure, or service under review, mapping dependencies and applicable regulatory requirements.
Contribute to IT audit planning: risk matrices, audit programs, information requests, data requirements, and testing strategies.
Test logical and privileged access controls, user administration, segregation of duties, change management, backups, updates, incident management, and security monitoring.
Evaluate controls across networks, operating systems, databases, cloud services, cybersecurity, business continuity, and disaster recovery, as well as technology resilience.
Evaluate application controls, configurations, interfaces, and automated processing across core banking systems, payment services, cards, mobile banking, internet banking, and other digital channels.
Review technology projects, from system acquisition and development to migrations and implementations, when requested.
Apply data analytics to identify unusual activities, access conflicts, control exceptions, and incomplete processing — performing accurate, reproducible, and securely handled tests.
Prepare complete and cross-referenced working papers; draft evidence-based findings, explaining the observed condition, applicable criteria, root cause, risks, and practical recommendations.
Promptly communicate significant vulnerabilities, suspected cyber incidents, unauthorized access, control failures, or scope limitations.
Follow up on technology findings and support authorized investigations while preserving evidence confidentiality and integrity.

What we offer

Direct employment at FDH Bank Mozambique, full-time, based in Maputo.
Salary: to be agreed with the employer (not disclosed in the job posting).
IT internal audit team with access to modern banking technology — Core Banking, digital channels, cloud.
Certification opportunities: the bank values professional certifications in audit and cybersecurity (CISA, CIA, CRISC, COBIT, ISO 27001).

How to apply

Send your detailed CV, a concise cover letter explaining your suitability for the role, and copies of relevant academic and professional qualifications to fdhmz-recrutamento@fdh.co.mz. Deadline: October 6, 2026.

Selection is conducted by FDH Bank Mozambique. On Inademy, your profile is free and you receive new job alerts via email and WhatsApp.

📢 Don't fall behind on job opportunities — get them first. Follow Inademy's official channel and receive fresh job offers every day at 07:30 AM: Inademy WhatsApp Channel

From the Inademy Guide

Minimum wage in Mozambique 2026

What the company is looking for

Mandatory

Bachelor's degree in Information and Communication Technologies, Information Systems, Computer Science, Cybersecurity, or a relevant field from a recognized institution.
At least 2 years of experience in IT audit, information systems audit, technology risk, cybersecurity, information security, IT operations, systems administration, application support, or technology controls.
Practical knowledge of IT governance, general IT controls, application controls, cybersecurity, data protection, business continuity, disaster recovery, and third-party technology risks.
Practical proficiency in data analytics tools; ability to work securely with system extracts, access information, and technical evidence.
Strong analytical, reporting, and communication skills — explaining technical risks in clear business terms.

Desirable

Experience in banking, financial services, or another regulated environment — including exposure to core banking systems or digital financial services.
Membership or progress toward certification with ISACA or the Institute of Internal Auditors.
Being in the process of obtaining the CISA (Certified Information Systems Auditor) certification.
CIA, CRISC, COBIT, ISO 27001, Cybersecurity, or equivalent certifications.

Expected professional standards

Technical evidence before opinion: control evaluations must be supported by thorough, reliable, and reproducible testing.
Risk focus: technical issues must be linked to their impact on confidentiality, integrity, availability, compliance, resilience, or business operations.
Secure information handling: system extracts, credentials, configurations, vulnerability data, and other sensitive evidence must be strictly protected.
Timely escalation: material vulnerabilities, incidents, scope restrictions, and access barriers must be reported immediately through the appropriate chain of command.
Operational independence: the role evaluates controls — it does not execute changes in production environments or perform system administration tasks.
Continuous technical development: staying updated on banking technology, cyber threats, regulations, data analytics, and professional IT audit practices.
Integrity, objectivity, professional competence, due professional care, and confidentiality are essential requirements.

Interested in this role?

Submit your application in just a few minutes.