Senior IT Auditor

Introduction

We are looking to recruit a Senior IT Auditor – Technology & Project Assurance to work within the Group Internal Audit department of Clicks GroupServices. The role will be based at Clicks Head Office in Cape Town and will report to the IT Audit Manager.

JOB DESCRIPTION

To provide independent, risk-based assurance over the group’s technology environment, major IT projects and digital transformation initiatives. Therole is responsible for planning and executing IT audit engagements, performing project assurance reviews across the project lifecycle, evaluatingtechnology risks and controls, and providing practical recommendations that strengthen governance, risk management and control.The role supports the delivery of the Internal Audit Plan while acting as a trusted advisor on technology risk during major business and IT changeinitiatives.

JOB OBJECTIVES:

Technology Audit:

• Provide independent assurance over the effectiveness of technology controls by planning and executing risk-based IT audits across keytechnology domains, including IT general controls, cybersecurity, cloud, infrastructure, data governance, resilience, third-party technology risk,and emerging technologies.
• Performing risk assessments, evaluating control design and effectiveness, leveraging data analytics, identifying control weaknesses and rootcauses, developing practical recommendations, reporting audit results, and monitoring the implementation of agreed corrective actions.

Project Assurance:

• Provide independent assurance over strategic business and technology projects throughout their lifecycle to ensure effective governance, riskmanagement, control execution, implementation readiness, and achievement of intended business outcomes.
• Review project governance, business cases, funding approvals, and accountability structures.
• Assess project planning disciplines, including scope, budget, resources, vendors, risk management, quality management, and changemanagement.
• Evaluate project execution to ensure effective management of risks, controls, testing, security requirements, issue resolution, and key projectchanges.
• Assess organisational and technical readiness for implementation, including operational preparedness, support models, security approvals,disaster recovery, and business continuity arrangements.
• Conduct post-implementation reviews to confirm project objectives and benefits have been achieved, controls are operating effectively, lessonslearned have been captured, and residual risks are acceptable.
• Ensure methodical documentation of risk and control matrices, testing results, conclusions and recommendations. Ensure follow up on findingsand corrective actions.
• Provide input and assist with the preparation and review of the various committee packs.
• Continued combined assurance approach to ensure maximum reliance by external audit on the work of internal audit.
• Successful working relationship with the key stakeholders, while providing quality independent audit assurance on the risks that matter.
• Proactively inform senior management of significant risks or exposures related to internal controls, compliance, and/or governance requiringprompt attention.
• Staying abreast of emerging technologies, industry trends and regulatory requirements impacting IT audit practises.
• Any other ad-hoc

Minimum requirements

Education:

• Completed Postgraduate BCom/ BSc is essential.
• CA (SA) (Desirable)
• CISA, CRISC or relevant professional qualification is essential.
• PMP or PRINCE2 or PMBOK certification (advantageous)
• COBIT Foundation certification (advantageous)
• ITIL Foundation certification (advantageous)

Job Related Knowledge:

• 5–7 years IT Audit experience.
• Experience auditing ERP environments (SAP preferred).
• Experience auditing cloud environments.
• Experience evaluating IT General Controls.
• Experience auditing applications and technology projects.
• Strong analytical skills in the use of data analytics or visualisation tools
• Understanding of the internal audit methodology
• Strong understanding of Global Internal Audit Standards (IIA 2024), Risk-based auditing, COBIT, ISO 27001, ITIL, PMBOK and/or PRINCE2
• Agile delivery methodologies
• SDLC
• Experience with tools such as:
• Power BI
• SAP analytics (advantageous)
• Microsoft products
• Experience performing project assurance over major technology programmes (Advantageous)
• Experience with ERP implementations (e.g. SAP S/4HANA). (Advantageous)
• Experience in retail, financial services or other large complex organisations (Advantageous)

Job Related Skills

• Ability to work under pressure and adhere to tight deadlines.
• Analytical and problem-solving skills.
• Professionalism, empathy, influencing, and interpersonal skills, combined with clear written / verbal communications.
• Treats all employees with dignity and respect and does not engage in intimidating, aggressive or disrespectful behaviours.
• Team player

Competencies

• Deciding and Initiating Action
• Leading and Supervising
• Adhering to Principle and Values
• Persuading and Influencing
• Presenting and Communicating Information
• Applying Expertise and Technology
• Delivering Results & Meeting Customer Expectations
• Entrepreneurial and Commercial Thinking
• Continuous learning mindset