Job Purpose

Provide support on IT audit process and to key stakeholders including management the board audit committee, assurance regarding information security controls, regulations , laws and compliance objectives of the organization.

Key Responsibilities:

Methodology / Procedure Development

• Support process in IT audits. Prepare audit reports for review by Senior and Head of Internal Audit. Communicate findings and areas for improvement to the Executive Committee in weekly status update meetings and exit meetings.
• Plan and execute IT audit projects in accordance with audit methodology and departmental standards to ensure quality of work completed.
• Conduct follow up reviews to ensure effective remediation of audit findings and positive improvement and impact to the control environment.
• Manage/ assist in IT projects within time budgets, target dates and escalate any timing problems or budget over.
• Understand and agree with management the risks being managed by business unit.
• Prepared IT audit reports, including executive summary and rating of adequacy of risk management, making practical and value-added recommendations to improve risk management practices and the efficiency and effectiveness of operations, audit reports are to be clear, concise and well-organized, and issued within departmental service standards.
• Assist the development of the three- year audit plan and the annual plan by performing IT risk assessments with 2nd line, 1st line Executive Management and other key stakeholders.
• Utilize technology to improve effectiveness and efficiency of audit process.
• Assist business unit management by providing risk management consulting and risk management education and training.
• Actively participates in departmental initiatives.
• Perform integrated audits to add more value on business audit emphasizing on IT areas such as digital processes, digital distribution, technology risks

People Management

• Support the team of IT audit professionals or technical specialists to ensure that audit activities are conducted to high standards of accuracy, rigor, and credibility and according to relevant regulations and industry standards.