Plan the Implementation of Specific Audits
- Plan and conduct audits as per the approved Internal Audit Methodology.
- Conduct preliminary survey to understand the area to be audited.
- Document and complete the planning documents (system description and risk and control gap analysis) with the auditee (opening meeting) for confirmation and indication of changes that need to be effected.
- Discuss the planning documents with the auditee after the opening meeting for confirmation of changes that need to be effected.
- Formulate the audit program based on the outcome of the preliminary survey using appropriate audit methodologies.
Supervise the Audit Process
- Allocate audit work to auditors as per RACM and manage hours for the audit team.
- Provide regular team progress to the IT Audit Manager.
- Conduct and supervise the audit as per the RACM.
- Review working papers for completeness and accuracy before submission to the IT Audit Manager.
- Review the system descriptions and risk and control gap analysis performed by the internal auditors.
Policy Review and Implementation
- Contribute to the development and implementation of departmental policy, procedures and processes.
- Keep up to date with effective policy and practice execution strategies.
Reporting
- Prepare and submit draft audit report with findings addressing audit objectives and scope to the IT Audit Manager.
- Address review notes from the IT Audit Manager and capture close-out meeting minutes.
- Track the auditee’s progress in resolving findings by conducting follow-ups.
- Provide assurance and recommend controls to business units in accordance with the relevant laws and regulations and National Treasury frameworks.
Stakeholder Management
- Facilitate and manage communication with relevant internal and external stakeholders in relation to investments and proactively and progressively manage the relationships.
- Communicate with all levels of stakeholder contacts.