Job Description

To lead and participate in integrated and specialised audit reviews, focusing on automated and application controls supporting the governance, financial, business and operational processes at divisional and business unit level within the FirstRand GroupHello future Internal Audit Specialist

FirstRand believes that its people are its single most important resource and will not operate in a sector unless it has people who are right for that market and who share FirstRand’s business values. We recruit self-starters who have a passion for what they do. We empower them, hold them accountable and reward them appropriately. We value diversity in our people, particularly for the way that this contributes to innovative thinking. If you think you will flourish in our environment, and you believe you have the necessary skills and competencies for the position advertised, then we are looking for you!

Are you someone who can:

• Obtain a good understanding of the IT control environment being audited (including link to business processes and risk management related aspects), and the interdependencies linked to this.
• Plan audit assignments based on key process and business risks identified and design the audit program in line with risks and key IT applications under review.
• Incorporate data analytics (DA) to enhance audit planning and create efficiencies in audit fieldwork.
• Execute audit field work in compliance with quality standards by following and completing prepared work programs. Assess the adequacy and effectiveness of governance, risk management practices and internal controls.
• Evaluate information security and IT general controls, including operations management and disaster recovery procedures, supporting the key IT applications and associated controls under review.
• Beneficial – RACF, HASS and Z/OS security reviews.
• Able to understand , navigate and audit technical security and configuration requirements of network devices , firewalls, webservers, operating systems and database management systems: e.g. Windows, Linux / Unix, AS400, MSSQL, MySQL, PostgreSQL, DB2, Oracle, ASA / PIX firewalls, IIS.
• Provide clear and sufficient audit evidence to support recommendations and audit opinion.
• Express an opinion based on the results of the work performed.
• Identify opportunities to improve the effectiveness of the IT control environment and governance processes.
• Identify and clearly articulate the root cause of issues identified and impact thereof and recommend changes to business processes that will address the IT control weaknesses.

You will be an ideal candidate if you:

• BSC / BCom (Information Systems) or equivalent degree.
• At least 3 years IT technical (operating systems, databases, firewalls, web servers, etc.) and general controls review experience.
• Experience with data analytics/ CAATs is an advantage.
• Experience in banking and financial services environment will be an advantage.

You will have access to:

• Challenging work in a complex and exciting environment
• Opportunities to innovate and create efficiencies.

We can be a match if you are:

• Curious & courageous - you're driven by always wanting to know more and learn more and you're brave enough to
• Obsessed with mastery - you know what it takes to become good at what you do and are constantly pushing yourself to do it.
• Have a general understanding of different risk types.

Are you interested to take the step? We look forward to engaging with you further. Apply now!

Important Closing Date Note

Take note that applications will not be accepted on the below date and onwards, kindly submit applications ahead of the closing date indicated below.

22/07/26 All appointments will be made in line with FirstRand Group’s Employment Equity plan. The Bank supports the recruitment and advancement of individuals with disabilities. In order for us to fulfill this purpose, candidates can disclose their disability information on a voluntary basis. The Bank will keep this information confidential unless we are required by law to disclose this information to other parties.