WHAT YOU GET TO DO
Conduct technology focused audits independently end to end
Review critical systems and processes to identify risks
Benchmark existing systems controls and processes with industry best practices
Conduct key control testing as per Sarbanes-Oxley (SOX) requirements
Maintain audit documentation as per established processes
Support external audit testing requirements as needed
WHAT ABOUT YOU?
You have…
Education
: Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
Certifications
: Certifications like CISA (Certified Information Systems Auditor) is a must. Additional certifications like CISM, CISSP, CRISC or CIA may be preferred.
Experience
: 4 to 6 experience in IT audit, internal audit, or a related role.
Key Responsibilities:
Internal Audits
: Plan, execute, and lead IT audits, including infrastructure, applications, information security and systems development audits.
Risk Assessment
: Identify and evaluate IT-related risks across different areas of the business and recommend improvements to mitigate these risks.
Audit Reporting
: Prepare audit findings, and present audit reports and recommendations to IT management regarding control weaknesses and areas of improvement.
Compliance
: Ensure that IT control environment complies with relevant standards and regulations (such as SOX, GDPR, etc.), as well as internal policies.
Process Improvement
: Provide recommendations for enhancing the efficiency and effectiveness of IT processes and systems.
Collaboration
: Work closely with other departments to evaluate risks, systems, and controls, and implement changes as necessary.
Key Skills:
Technical Knowledge
: Familiarity with IT systems, cloud infrastructure, cybersecurity and related technology.
Audit Skills
: Knowledge of audit methodologies and standards and internal control frameworks like COBIT or COSO.
Analytical Thinking
: Ability to analyze risks, identify issues, gaps and identify areas for improvement.
Communication Skills
: Strong written and verbal communication skills for managing key stakeholder relationships, reporting findings and presenting to stakeholders.
Risk Management
: Understanding of risk management principles, particularly in an IT context.
Attention to Detail
: Thoroughness in reviewing systems and identifying potential weaknesses.
