The Manager: IT Internal Audit is responsible for executing technology and integrated audits, including ad hoc management requests, to strengthen the control environment across cyber security, general IT and application audits. Audit work must be delivered in line with the Internal Audit methodology and professional standards.

Key accountabilities:

• Execute audit as per the approved annual audit plan
• Prepare clear, evidence-based audit reports that highlight key risks, root causes and practical recommendations
• Deliver audit work that meets Internal Audit methodology, IIA standards and agreed quality requirements
• Identify, develop, and document audit issues and recommendations using independent judgement concerning areas being reviewed
• Incorporate the use of data analytics within the audit approach to increase the extent of assurance, quality of insight, and efficiency of our audits. Recommend and implement ideas for improvement

Key performance indicators:

• Deliver assigned audits from the approved annual audit plan within agreed timelines and with minimal supervision
• Complete cyber security, application and general IT audits in line with the approved audit scope and plan
• Embed data analytics testing in audits
• Ensure that audits are performed in accordance with the requirements of the Internal Audit methodology and IIA standards
• Issue high-quality audit reports with clear findings, agreed actions and accountable owners
• Track and follow up audit actions in line with Internal Audit methodology and agreed remediation timelines
• Achieve the Quality Assurance Review (QAR) target through effective self-review, peer review and timely quality improvements
• Manage relationships with clients across the organisation
• Keep abreast of technology-related internal audit and technical developments

Core competencies, skills and experience:

IT audit professional with strong analytical, stakeholder management, communication and project delivery skills, backed by IT governance, cyber security, data analytics and audit experience

Knowledge:

• Relevant frameworks (NIST, COBIT, ITIL, COSO, ISO17799\ISO27001, etc.)
• Technical/infrastructure knowledge is essential i.e. detailed knowledge of the following technology and financial services platforms:
  • Operating systems – UNIX, LINUX, Windows
  • Databases – SQL, Sybase, Oracle
  • IT Networks
  • Firewalls
  • Data Centre
  • Cyber security
  • Data Analytics (SQL, PowerBI, or QlikSense)
• Relevant laws
• Intelligent Automation (RPA, AI, ML)

Must-have technical/professional qualifications:

• A relevant IT Bachelor Degree (e.g. BSC Computer Science, B.Com Informatics/ B.Com Information Systems) or any other relevant qualification
• At least one relevant professional certification, such as CISA, CISSP or CISM, is essential

Technical / professional experience required:

• 3-5 years audit experience, at least 3 years of applications, infrastructure, and general IT audits (Essential)
• Minimum of 3 years Cyber Security audits experience (Advantage)
• Data analytics (Advantage)
• Financial Services industry experience (Advantage)
• Relevant postgraduate degree (Advantage)

• Execute audit as per the approved annual audit plan
• Prepare clear, evidence-based audit reports that highlight key risks, root causes and practical recommendations
• Deliver audit work that meets Internal Audit methodology, IIA standards and agreed quality requirements
• Identify, develop, and document audit issues and recommendations using independent judgement concerning areas being reviewed
• Incorporate the use of data analytics within the audit approach to increase the extent of assurance, quality of insight, and efficiency of our audits. Recommend and implement ideas for improvement

• Strong analytical skills
• Stakeholder management skills
• Communication skills
• Project delivery skills
• IT governance knowledge
• Cyber security knowledge
• Data analytics knowledge
• Audit experience

• A relevant IT Bachelor Degree (e.g. BSC Computer Science, B.Com Informatics/ B.Com Information Systems) or any other relevant qualification
• At least one relevant professional certification, such as CISA, CISSP or CISM, is essential