IT Auditor

Synopsis

To provide independent assurance on the adequacy and effectiveness of the IDC’s information technology controls, governance, risk management, and security processes through the execution of risk-based IT audits.

The role identifies control weaknesses, recommends improvements, and monitors the implementation of corrective actions to support the achievement of organizational objectives and regulatory compliance.

Qualification and Experience

BCom Degree in Information Systems or BSc Information Science / Computer audit or

equivalent

CISA qualification

CISM (Certified Information Security Manager) advantageous

Minimum of 5 to 8 years’ IT Audit experience

Experience in performing Computer Assisted Auditing Techniques (CAATS) or Data Analysis

Experience in evaluating general and computerised application controls and following a

risk-based approach

Exposure in reviewing access security in a client/server environment on Microsoft Network

Internet/Firewall will be an added advantage

Exposure in reviewing systems development life cycle and change management processes will be an added advantage

Knowledge of IT governance and risk management

Understanding of SAP & Power BI

Familiarity with frameworks such as COBIT, ISO 27001 and ITIL

Knowledge of cloud computing, third-party technology risk, data privacy, project assurance

Knowledge of Cybersecurity & security Infrastructure

Knowledge of Microsoft dynamics will be advantageous

Understanding artificial intelligence, automation and digital transformation risk.

Roles and Responsibilities

 Perform IT general controls reviews, application control reviews, cybersecurity reviews and governance reviews.

 Keep the Internal Audit Management informed of all significant matters, consult when

necessary and communicate all significant meetings with auditees as appropriate;

 Prepare clear, evidence-based audit findings, root causes, risks and recommendations.

 Track agreed management actions and escalate overdue or ineffective remediation.

 Use data analytics to support audit testing and continuous monitoring;

 Evaluate the design of Systems & Procedures to identify any potential gaps or risks and provide any relevant inputs prior to submission to the relevant committee

 Provide advisory role in the IT steering committee(s) as and when required.

Job Requirements

TECHNICAL/FUNCTIONAL COMPETENCIES

Analytical and problem-solving

Negotiation and Influencing

Attention to detail

Planning and Organizing

Professionalism and discretionary

BEHAVIOURAL COMPETENCIES

Results Oriented.

Ethical Commitment

Balanced Judgment and accountable leadership

Relationship Building & Networking

Collaboration

Accountability

Resilience

Sound judgement

Job Reference: IDC00790