IT Audit Specialist

National Audit Office; London; On-site; GBP 50,000 - 70,000; Full time

Job summary

The National Audit Office is seeking an experienced IT Audit Specialist to join their team. This role involves supporting financial audits through IT audit work, focusing on areas like Oracle and SAP systems. The ideal candidate will have strong report writing skills and the ability to work independently while collaborating with various teams. This position offers opportunities for personal development and the chance to contribute to the improvement of public service delivery.

Qualifications

• Experience in IT audit work supporting financial audits.
• Ability to produce quality IT audit work for manager review.
• Strong report writing skills required.

Responsibilities

• Support IT Senior Audit Managers in scoping and planning IT audit work.
• Guide FA teams in responding to IT-related risks.
• Maintain effective relationships with Financial Audit teams.

Skills

Oracle finance systems

SAP finance systems

Active Directory

System migrations

Report writing

Education

Strong academic background

IT audit qualification (CISA preferred)

Formal finance qualification

Tools

Oracle EBS

SAP S/4 HANA

Unix systems

Job description

About us and role overview
The National Audit Office (NAO) supports parliament to hold government to account and to improve public services. We focus on driving long-term sustainable improvement in public service delivery and work with government and our stakeholders to deliver better performance. In a nutshell, we help the nation spend wisely.

The clients of the NAO are investing in IT systems to address the challenges they face in fulfilling their role. This includes investing in new finance systems and related support systems. These investments mean that, increasingly, the NAO’s financial audits are relying on automated controls / IT dependent manual controls and supporting IT general controls, necessitating increased requirements for IT Audit to support the NAO’s audits of financial statements.

The IT Audit specialist will be joining an IT audit team which is made up of seven IT Audit Specialists, four IT Audit Managers and four Apprentices to deliver work across more than 50 different clients covering all areas of the NAO’s financial audit client base.

The team is led by an IT Audit Director and four IT Senior Audit Managers.
We require experienced IT Audit Specialists capable of supporting financial audit teams and IT Audit Managers to scope, plan and perform the hands-on delivery of all end to end IT audit work required for a client, including testing General IT Controls and related automated controls.

We also require the candidates to be involved in other internal aspects of our IT audit practice work, including the development of practice material e.g. work programmes, guidance material etc.

Given the likely engagements on which they will work, it would be helpful for the candidate to have experience in some or all of the following areas:
-Oracle finance systems (including Fusion);
-SAP finance systems (including S/4 HANA);
-Active Directory; and
-System migrations.

On non-client work:
-Given that there are a range of tasks that the candidate could be asked to work on, the candidate must have the skills and experience to be able to move from a client focussed IT audit testing role to an internal material development role.
-As the candidate will be producing client facing and internal facing written material, they must have strong report writing skills.

The preferred candidate is likely to be an experienced Senior Consultant or equivalent, with experience of IT audit work, close to promotion to a managerial role, and is capable of working independently and taking ownership of the day to day delivery of all end to end audit work.

Responsibilities / Relationships:
Key responsibilities will be supporting the IT Senior Audit Managers and IT Audit Managers in the scoping. planning and delivery of the annual programme of IT audit work. Depending on the level of experience of the candidate, some management of specific IT audit engagements may be required.

Delivery of specific IT audit engagements:
-Use your technical knowledge and understanding of the NAO’s financial audit methodology to:
-guide FA teams in responding to IT related risks to their audit; and
-support the production of an appropriately detailed IT audit response to address the risks identified for relevant technology layers;
-Possess technical knowledge and experience of how to audit IT application and supporting general IT controls in one or more of the following areas at relevant technology layers: -Oracle EBS, Oracle Fusion, SAP ECC, SAP S/4 Hana or Unix systems. Knowledge of auditing Active Directory and cloud-based systems would be favourable but not essential.
-IT audit technical knowledge and experience of obtaining assurance over the effective operation of IT controls / functions, interfaces, reports, segregation of duties, automated calculations, new system implementations / migrations etc.
-Proven ability in producing quality IT audit work for manager review.
-Competent in understanding and documenting complex business processes and identifying controls to address financial and business process risks (purchase to pay risks) through process maps.
-Experience of using, interpreting and evaluating of third-party reports e.g. (ISAE3402 reports) in accordance with ISA 402 for identified controls in support of financial audit teams.
The ability to:
-understand IT processes/technical documentation/IT audit issues and interpret/translate these into understandable language for non-specialist internal colleagues; and
-clearly articulate the relevance of risks arising from IT to the Audit Manager (IT Audit) when supporting the FA team.
-Summarises IT audit findings arising from IT audit work performed, impact on the business/financial statements, recommending additional audit work and drafting practical recommendations for audited body management.
-Form / maintain an effective, professional working relationship with the Financial Audit team to ensure they are updated on progress and act as a conduit between FA team and IT audit management/colleagues keeping both abreast of developments.
-Form / maintain the relationship with the audited body to ensure the delivery of an agreed schedule of evidence you will have prepared to support your IT audit work; escalating as appropriate.
-A strong track record of maintaining and furthering your technical IT and IT audit knowledge to ensure that you remain capable of understanding and mitigating risks arising from existing and emerging technology.

Development of IT Audit within the NAO:
-Identify opportunities to improve the quality, efficiency or value of the work performed by the Digital Financial Audit (DFA) function.
-Support the development and training of IT audit trainees and other IT audit colleagues through sharing your knowledge and experience.
-Ensure you remain up to date with DFA function and its sub-team activities, initiatives, priorities and those of relevant NAO internal practice networks.
-Maintain the relationship between the DFA functional team and internal FA teams, internal practice networks, and external clients/stakeholders.

Education/work experience
-A strong academic background. We will need to see evidence of academic achievement which may be through attendance at university, or similar institution.
-IT audit experience, with a significant portion of that experience arising from IT audit work done in support of the financial audit.
-Experience of working on clients with large complex systems. Experience in Oracle (including Fusion) and SAP (including S/4 HANA) systems would be of particular interest.
-An IT audit qualification (e.g. CISA) is preferred, but evidence of strong practical experience of delivering IT audits in support of the financial audit is more important than a qualification.
-A formal finance qualification would be an advantage.

Attributes
-Intellectual curiosity, especially about technology and business process related matters.
-Ability to be trusted to work independently as well as and co-operatively and collaboratively as part of a team to deliver a team effort.
-Drive and determination to overcome obstacles, resistance or challenges in order to achieve goals.
-Commitment to personal development and keeping technical skills up to date.
-Good communication skills and ability to flex these to address the various audiences from junior audit staff through to senior level client staff.