IT Audit Manager

Key Purpose

• The successful candidate will be responsible for completing audits inside Discovery and providing feedback on the outcome.  The successful candidate must have a drive, sense of urgency and work flexibility.

Areas of responsibility may include but not limited to

• Scheduling and planning of audits, assignment of staff and review resource requirements.
• Defining the purpose, scope and audit approach of each audit for assigned areas of audit coverage.
• Agree audit scope with client and provide final engagement letter to Senior IT Audit Manager for approval and distribution.
• Ensuring that all risks are addressed for the specific audit engagements.
• Provide feedback to Senior IT Audit Manager on the planning, execution and reporting of the audits.
• Review and sign-off of planning, working papers and reports, and where required raise review notes for the work performed by Senior IT Auditors / IT Auditors (pertaining to Engagement Letters, Audit Planning Memos (“APMs”), system descriptions, walkthroughs, process flow diagrams, Risk and Control Matrix (“RACM”), test procedures, working papers, reports and action plans).
• Address review notes raised by the Senior IT Audit Manager.
• Monitoring of the quality of work performed by the audit team and taking corrective action (where applicable).
• Provide training and supervision to audit team in order to ensure that that the required audit objectives are met and that adequate practical coverage is achieved.
• Assist Senior IT Audit Manager in developing the Audit Universe, Annual Internal Audit Plan, and the Three Year Rolling Plan.
• Monitor progress of audits against plan.
• Track progress /changes in business risks and align audit plan.
• Request feedback from management.
• Escalate cases where feedback is not received.
• Ultimately responsible for quality of audit files (Pentana or other).
• Proactively take on additional tasks as requested by Senior IT Audit Manager.
• Provide meaningful input and monitor the effective and timely implementation of management actions to address any control weaknesses identified through risk profiling, risk events and control self- assessment.
• Conduct a Quality Assurance review of audit files and finalise once comfortable.
• External audit – develop and manage the relationship with external audit as it pertains to the reliance on IT Audit work, data requirements and co-ordination of resources to deliver specific assurance for external audit.
• Drafting and reviewing of engagement letters and final reports for Senior Management review.
• Review of draft observations and forwarding these to business for comment.

Reporting to:

• Audit Committees
• Business Risk Committees
• Company Excos
• Management (detailed audit reports)
• CAE (where applicable)
• Preparation and submission of Risk and Audit committee reports / packs.
• Attending Audit Committees, Risk Committee and Steering Committee meetings, as and when required.
• Assist in periodic reporting on the status and results of the annual audit plan and the sufficiency of department resources.
• Perform Peer Quality Review Assessments.
• Ad-hoc reporting.

Education and Experience

• B Degree or equivalent (and relevant) qualification. (Honours / Masters (with Computer Science / Computer Auditing / Information Systems / Auditing as majors)
• CISA (is required)
• CIA / ACCA / CIMA / CFSA / CPA / CIA / CISM / CRISC / CGIT / CCSA (one or more of the afore mentioned is preferable)
• Experience in conducting financial, operational or IT audits.
• Reporting to Audit and/or Risk Committees.

Essential knowledge:

• Internal Controls
• Risk management framework (COSO)
• IT General Control reviews
• Application Control reviews
• Internal controls
• Corporate and IT governance
• IT Infrastructure technical knowledge (reviewing of databases and operating systems)
• Cyber security
• Corporate governance principles
• Computer literacy

 Personal Attributes

• Upholds ethics and values and demonstrates integrity
• Takes initiative and works under own direction with the ability to make quick, clear choices which may include tough choices or considered risks
• Shows respect for the views and contributions of others.
• Strong negotiating and influencing skills.
• Excellent communication skills. The candidate should speak fluently, have the ability to write in a well-structured and logical manner.
• Demonstrates an understanding of different organisational departments and functions.