Duties and Responsibilities

The duties include:
-Planning and conducting risk-based information systems audits in accordance with approved audit plans and professional standards.
-Assessing IT governance, technology-related risks, cybersecurity arrangements and compliance with applicable policies, legislation and regulatory requirements.
-Evaluating IT general controls, application controls, system access management, change management and IT operational controls.
-Auditing business applications, including financial, payroll, procurement, inventory and other operational systems.
-Assessing data integrity, database security, information management practices and the reliability of system-generated reports.
-Using data analytics and computer-assisted audit techniques to identify anomalies, irregular transactions and potential control weaknesses.
-Reviewing IT projects, system implementations, upgrades, integrations and data migration processes.
-Evaluating business continuity arrangements, IT disaster recovery plans, data backups and system resilience.
-Assessing IT procurement, asset management, software licensing, outsourced services and third-party technology risks.
-Preparing audit working papers, reports and practical, risk-based recommendations.
-Following up on audit findings and verifying the implementation of agreed corrective actions.
-Supporting authorised investigations into suspected fraud, unauthorised system access, data manipulation and other technology-related irregularities.
-Communicating significant IT risks and control deficiencies to the Internal Audit Manager and other relevant governance structures.

Qualifications and Experience

Qualifications and Experience
The successful candidate should possess the following qualifications and related experience:
-A Bachelor’s Degree in Information Systems, Computer Science, Information Technology, Cybersecurity, Accounting, Auditing or a related field.
-At least 3–5 years of relevant experience in information systems auditing, technology risk, IT controls, cybersecurity assurance or internal auditing with substantial IT exposure.
-Demonstrable experience in planning and executing IT audits, testing IT general and application controls, preparing audit working papers and compiling audit reports.
-Familiarity with data analytics tools and computer-assisted audit techniques.
-Exposure to enterprise resource planning (ERP) systems, financial applications, databases, networks, access management and system change controls.
-Professional Certification in Information Systems Auditing (CISA), Internal Auditing (CIA), Information Security (CISM or CISSP), Technology Risk (CRISC), or relevant COBIT or ISO/IEC 27001 training or certification.
-Experience in systems implementation audits, business continuity, disaster recovery and third-party technology risk management.
-Experience in regulated, financial, manufacturing, mining or other operationally complex environments.
Strong analytical, investigative and problem-solving skills.
-Sound knowledge of IT audit methodologies, information security and technology risk management.
-Excellent report-writing, communication and stakeholder engagement skills.
-Attention to detail and a high level of integrity.