Senior It Auditor

Bdo South Africa; Gauteng; On-site; ZAR 500 000 - 800 000; Full time

Job summary

A leading company in South Africa is seeking an IT Auditor to enhance their quality control systems and provide technical support for audit processes. The role involves reviewing IT general controls, application controls, and data analytical procedures while collaborating with the Head of EQR. Candidates should have a strong background in IT auditing, cybersecurity, and data integrity.

Qualifications

• Experience in IT auditing and quality control.
• Knowledge of International Standards on Auditing (ISAs).
• Ability to train and guide audit teams.

Responsibilities

• Review IT risks and controls, including cybersecurity.
• Develop and implement IT-related quality control review procedures.
• Train audit managers and partners on recurring themes.

Skills

Cybersecurity

Data Integrity

Change Management

Configuration Management

Computer-Assisted Auditing Techniques (CAATs)

Job description

The objective of the role is to perform reviews to ensure consistency in planning, execution, and conclusion of IT General and Application controls. The role involves supporting, developing, implementing, and monitoring audit programs, working papers, and templates. It also includes improving the quality control system and providing technical support to engagement quality reviewers in their performance of EQRs in compliance with International Standards on Auditing (ISAs).

Reporting and Collaboration

The role reports to the Head of EQR and collaborates with the assigned EQR to review:

1. IT general controls, application controls, and data analytical procedures on engagement files.

Key Responsibilities

1. Review of related IT risks and controls, including cybersecurity.
2. Review of Access Controls & ITGC.
3. Review of Change management processes.
4. Review of Configuration management.
5. Review of controls related to data integrity, conversion, and protection, especially in data migration.
6. Review of Application control and configuration testing.
7. Review responses to deficiencies noted by the IT Auditor to assess sufficiency.
8. Review of IPE and data extraction reports.
9. Review of IT-related (ISAE) Assurance Reports on Controls at a Service Organization.
10. Utilize computer-assisted auditing techniques (CAATs).
11. Assist in developing and implementing IT-related quality control review procedures and working papers.
12. Provide guidance on quality control related to engagement performance.
13. Participate in initiatives to enhance IT-related quality control review processes.
14. Identify training needs based on quality control reviews.
15. Collate review findings for remedial action and learning.
16. Train audit managers and partners on recurring themes.
17. Liaise with firm departments regarding findings.