IT Auditor

SUMMARY:

To provide independent assurance on the adequacy and effectiveness of the IDC’s information technology controls, governance, risk management, and security processes through the execution of risk-based IT audits.

The role identifies control weaknesses, recommends improvements, and monitors the implementation of corrective actions to supp...

POSITION INFO:
To provide independent assurance on the adequacy and effectiveness of the IDC’s information technology controls, governance, risk management, and security processes through the execution of risk-based IT audits. The role identifies control weaknesses, recommends improvements, and monitors the implementation of corrective actions to support the achievement of organizational objectives and regulatory compliance. BCom Degree in Information Systems or BSc Information Science \/ Computer audit or equivalent CISA qualification CISM (Certified Information Security Manager) advantageous Minimum of 5 to 8 years’ IT Audit experience Experience in performing Computer Assisted Auditing Techniques (CAATS) or Data Analysis Experience in evaluating general and computerised application controls and following a risk-based approach Exposure in reviewing access security in a client\/server environment on Microsoft Network Internet\/Firewall will be an added advantage Exposure in reviewing systems development life cycle and change management processes will be an added advantage Knowledge of IT governance and risk management Understanding of SAP Power BI Familiarity with frameworks such as COBIT, ISO 27001 and ITIL Knowledge of cloud computing, third-party technology risk, data privacy, project assurance Knowledge of Cybersecurity security Infrastructure Knowledge of Microsoft dynamics will be advantageous Understanding artificial intelligence, automation and digital transformation risk.  Perform IT general controls reviews, application control reviews, cybersecurity reviews and governance reviews.  Keep the Internal Audit Management informed of all significant matters, consult when necessary and communicate all significant meetings with auditees as appropriate;  Prepare clear, evidence-based audit findings, root causes, risks and recommendations.  Track agreed management actions and escalate overdue or ineffective remediation.  Use data analytics to support audit testing and continuous monitoring;  Evaluate the design of Systems Procedures to identify any potential gaps or risks and provide any relevant inputs prior to submission to the relevant committee  Provide advisory role in the IT steering committee(s) as and when required. TECHNICAL\/FUNCTIONAL COMPETENCIES Analytical and problem-solving Negotiation and Influencing Attention to detail Planning and Organizing Professionalism and discretionary BEHAVIOURAL COMPETENCIES Results Oriented. Ethical Commitment Balanced Judgment and accountable leadership Relationship Building Networking Collaboration Accountability Resilience Sound judgement