Senior IT Auditor

Division: Group Risk & Compliance (Internal Audit)

Location: Johannesburg, Gauteng

Employment Type: Permanent | Full-Time

Reporting to: Group Head: Internal Audit

Job Purpose

Fidelity Services Group is seeking an experienced Senior IT Auditor to join our Group Risk & Compliance team. This role is responsible for planning, executing and reporting on independent IT audit engagements across the Group, providing assurance over information technology controls, cybersecurity, application controls, data governance and regulatory compliance.

The successful candidate will work closely with executive management and the Board Audit & Risk Committee to strengthen governance, mitigate technology risks and support the Group's combined assurance framework.

Key Responsibilities

• Develop and execute risk-based IT audit plans.
• Conduct IT General Controls (ITGC) audits covering:
  • Access Management
  • Change Management
  • IT Operations
  • Backup & Recovery
  • Physical & Environmental Security
• Perform application control reviews across financial and operational systems.
• Audit cybersecurity controls aligned with ISO 27001, COBIT 2019 and the NIST Cybersecurity Framework.
• Assess POPIA compliance and data governance practices.
• Perform data analytics and continuous auditing using audit analytics tools.
• Review IT projects and major system implementations.
• Support forensic investigations involving digital evidence.
• Prepare high-quality audit reports with practical recommendations.
• Present findings to management and contribute to Board Audit & Risk Committee reporting.
• Track remediation plans and validate implementation of agreed actions.
• Support the Group's combined assurance model and technology governance initiatives.
• Contribute to audit methodology, quality improvement and emerging technology risk coverage.

Minimum Requirements

Qualifications

• Bachelor's Degree or Advanced Diploma (NQF Level 7) in:
  • Information Systems
  • Computer Science
  • Internal Auditing
  • Accounting
  • or related field
• CISA certification is advantageous.
• Additional certifications such as CIA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor, COBIT Foundation or CA(SA) will be advantageous.
• Valid Code B driver's licence.

Experience

• 5–7 years' IT Audit experience.
• Minimum 2 years leading audit engagements.
• Experience auditing:
  • IT General Controls
  • Application Controls
  • Cybersecurity Controls
• Experience within medium to large multi-entity organisations.
• Knowledge of:
  • SQL Server
  • Oracle
  • Windows
  • Linux
  • Active Directory
  • Microsoft Azure
  • AWS
• Experience using:
  • ACL/Galvanize
  • IDEA
  • Power BI
  • SQL
  • Python
• Experience engaging with executive management and external auditors.

Knowledge & Technical Skills

Applicants should demonstrate knowledge of:

• COBIT 2019
• ISO 27001
• ISO 22301
• NIST Cybersecurity Framework
• IIA Global Internal Audit Standards
• POPIA
• Cybercrimes Act
• Companies Act
• King V
• Risk-based auditing
• Data analytics
• IT governance
• Information security
• Internal controls

Behavioural Competencies

• High integrity
• Professional scepticism
• Analytical thinking
• Excellent communication skills
• Strong report writing ability
• Relationship building
• Planning and organisational skills
• Ability to manage multiple audits simultaneously
• Coaching and mentoring ability

We reserve the right not to make an appointment to any advertised position.

Whilst preference is given to existing employees at all times and the choice made is purely on merit, Historically Disadvantaged Candidates and Black Female Candidates are encouraged and supported in the FSG team. Whilst black female candidates will be given priority as per our transformation policy subject to the above criteria.

Fidelity Services Group (Pty) Ltd supports global fair practice and business ethics on the continuous development of our human capital as the key resource to our success in the markets in which we participate.

Should you not be contacted regarding this position within 10 working days from the closing date, please regard your application as unsuccessful.