IT Auditor

ACR-536


The objective of Internal Audit is to provide independent, objective, reliable and timely assurance to the Audit Committee as a sub-committee of the Boards of Directors of the companies in the Group (referred to as “the Board”) and Executive Management over the effectiveness of governance processes, managing risk and internal controls over current and evolving risks. This will help management protect the assets, reputation and sustainability of the organisation.

The candidate will be responsible for assisting the Senior IT Auditor and Internal Audit Manager in executing IT related audit activities within an Institutional and Retail Investment Management environment.

Main responsibilities:

The role entails assisting the Internal Audit function in the risk-based planning and development of the organisation-wide audit coverage plan, involvement in planning and completing IT audit activities as well as identifying risks and controls.

Key focus areas:

IT Auditing
Data analytics

Full involvement in the audit lifecycle which includes:


* Understanding of IT Risks and Controls;
* To develop and record risk-based plan for each engagement, including the scope, objectives, and timing and resource allocations;
* To develop and update risk-based audit programmes for the allocated audit universe;
* To identify and evaluate significant risk exposures relating to the control processes and make appropriate recommendations for improvement;
* To execute the risk based IT audits (e.g. IT Projects, application systems, general IT controls, CAATS, IT Security, databases, technology platforms);
* Performing IT audit action item follow-up testing;
* Providing project risk assurance services, as well as completing developmental audits with regular follow ups and reporting. Coverage may include new development initiatives, infrastructure projects, data conversions, web projects, business analysis and testing, as well as relationships with technology vendors;
* Writing reports including communicating findings to senior management;
* Assisting in promoting risk awareness throughout the Group;
* Assisting with regular reporting the Risk and Compliance Committee and Audit Committee.


Qualifications:

* CISA, CIA, CA (SA) [or equivalent qualification]
* Graduate in business and/or technology fields.
* Relevant courses in IT Governance, Information Security, Project Risk Management, IT Audit.

Skills/Competencies and experience:

* 4+ years’ experience in IT auditing (Application controls, general computer controls, technology layer reviews, IT Process reviews). Financial Services exposure that covers both retail and institutional business areas will be advantageous and strong candidates that possess extensive experience will be considered for a more senior role;
* Knowledge of IT Audit Frameworks (e.g. COBIT, ITIL etc.) as well as ACL, SAS, IDEA or similar would be advantageous;
* Candidates with a proven ability for both operational and technology components of the business will have a distinct advantage;
* Strong interpersonal skills and emotional intelligence;
* Ability to work on own initiative and with minimal supervision;
* Ability to communicate and interact effectively with staff at all organisational levels;
* Ability to persuade or inspire others to gain acceptance of good ideas;
* Outstanding report writing skills;
* Attention to detail;
* Passionate and driven;
* Strong team player
* Proactive and resilient;
* Strong technical skills
* Organised and deadline driven; and
* Strong analytical, investigative and probing skills.