Our client is seeking an experienced IT Audit professional with a strong emphasis on enterprise applications, business systems and application controls. The role will assess technology risks across complex IT environments, evaluate the effectiveness of internal controls, and work closely with senior stakeholders to strengthen system integrity, governance and operational resilience.
Key Responsibilities
- Lead IT audit and advisory engagements focusing on enterprise applications, including ERP systems, business-critical platforms and complex application environments, assessing system configurations, business process controls and overall control effectiveness.
- Evaluate application controls covering transaction processing, data accuracy and completeness, system interfaces, user access management, segregation of duties and application authorisations.
- Review IT general controls across databases, operating systems, infrastructure and cloud environments, including change management, system development life cycle, cybersecurity and disaster recovery arrangements.
- Apply data analytics and technology-driven audit techniques to identify control gaps, unusual transaction patterns and opportunities to improve application design, system workflows and business processes.
- Prepare and present audit findings and practical recommendations to senior management and governance committees, while overseeing audit planning, engagement delivery, working paper quality and the development of team members.
Requirements
- Degree in Computer Science, Information Technology or a related discipline, with at least 10 years of experience in IT audit, application controls, technology risk or IT controls assurance.
- Strong experience auditing enterprise applications and business systems, including application configurations, access controls, transaction processing, system interfaces and business process controls.
- Good understanding of IT general controls, audit methodologies, risk and control frameworks, and the security measures required to safeguard business-critical systems and data.
- Familiarity with enterprise technology environments such as SAP, SAP HANA, Oracle, SQL, Microsoft technologies, cloud platforms, SaaS solutions or data analytics tools.
- Strong stakeholder management and communication skills, with the ability to translate complex application and technology risks into actionable recommendations for senior management.
Professional certifications such as CISA, CIA, CRISC, CISM or CISSP will be advantageous. Experience managing audit engagements, supervising team members and delivering IT audit advisory projects is preferred.