IT Audit Manager

Clicks Group Limited; Cape Town; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Clicks Group Limited in Cape Town seeks an IT Audit Manager to lead the Group Internal Audit technology risk, covering governance, cybersecurity, digital transformation, data governance and emerging technologies. Based at Clicks Head Office in Cape Town, you will report to the Head of Internal Audit.

You will drive risk-based technology audit planning, oversee ITGCs, cloud environments, ERP and major projects, and collaborate with cross-functional teams to deliver independent assurance and

Qualifications

• Knowledge of technology governance and IT risk management.
• Experience with IT general controls, application controls and cybersecurity.
• Familiar with cloud environments, ERP and data governance.

Responsibilities

• Lead IT audit team and provide independent assurance over technology governance and cybersecurity.
• Develop and execute a risk-based technology audit plan covering ITGCs, applications, cloud and ERP.
• Lead integrated audits with cross-functional teams to assure technology-enabled processes.
• Report findings and monitor remediation for governance committees.

Skills

IT governance

Cybersecurity

Data governance

Risk-based auditing

Team leadership

Stakeholder engagement

Education

CISA, CRISC or relevant professional qualification

Tools

COBIT

ITIL

NIST

PRINCE2

SAP

Job description

We are looking to recruit an IT Audit Manager to work within the Group Internal Audit department of Clicks Group Services. The role will be based at Clicks Head Office in Cape Town and will report to the Head of Internal Audit.

JOB PURPOSE:

To lead the group's technology audit and digital assurance capability, providing independent risk-based assurance over technology governance, cybersecurity, digital transformation initiatives, critical business systems, data governance, artificial intelligence and emerging technology risks.

JOB OBJECTIVES:

• To lead the IT audit team and provide independent assurance over the adequacy and effectiveness of governance, risk management and controls relating to technology, cybersecurity, digital platforms, information assets and emerging technologies.
• Provide assurance over major technology-enabled programmes, system implementations, upgrades, cloud migrations and digital transformation initiatives, including governance, security, implementation readiness and value realisation.
• Develop and execute a risk-based technology audit plan covering IT general controls (including relating controls supporting financial reporting), application controls, cybersecurity, cloud environments, ERP and WMS platforms, technology-enabled business processes, third-party technology risk, business continuity and major technology projects.
• Lead integrated audit engagements with operational, financial, forensic and data analytics teams to provide end-to-end assurance over technology-enabled business processes.
• Define and continuously enhance technology audit methodologies, testing approaches and assurance frameworks, working closely with the data analytics team to identify opportunities for technology enabled testing and automation to improve assurance quality, efficiency and coverage.
• Ensure the quality and consistency of risk assessments, risk and control matrices, audit working papers, testing results, conclusions and recommendations; monitor remediation and independently validate corrective actions.
• Provide clear, timely and meaningful reporting for senior management and governance committees on significant technology risks, cyber threats, control weaknesses, remediation progress and emerging risk trends.
• Strengthen the combined assurance model through effective collaboration with external audit and other assurance providers, while preserving Internal Audit independence and objectivity.
• Build and maintain effective professional relationship with the key stakeholders, while providing quality independent audit assurance on the risks that matter.
• Lead, coach and develop IT audit team members, fostering accountability, collaboration, mutual respect and conduct aligned to the Clicks Group values.
• Stay abreast of emerging technology developments, cybersecurity threats, digital business trends, regulatory developments and leading technology assurance practices to ensure Internal Audit remains relevant and forward-looking.

EDUCATION:

• CISA, CRISC or relevant professional qualification is essential.

JOB RELATED KNOWLEDGE:

• 8 to 10 years IT audit experience. Big 4 or mid-tier audit firm experience preferred.
• Extensive knowledge of technology auditing, including IT governance, IT general controls, application controls, cybersecurity, project assurance, cloud risk, data governance and technology risk management.
• Working knowledge of relevant technology governance, cybersecurity, service management and project delivery frameworks, including COBIT, ITIL, NIST, PMBOK and/or PRINCE2.
• Strong understanding of risk-based internal audit methodology and the Global Internal Audit Standards (IIA 2024).
• Strong understanding of cybersecurity, digital resilience, privacy, artificial intelligence governance, emerging technology risks and applicable regulatory requirements.
• Knowledge of auditing SAP, cloud and other complex enterprise technology environments will be an advantage.
  

JOB RELATED SKILLS

• Ability to work under pressure and adhere to tight deadlines.
• Analytical and problem-solving skills.
• Sound professional judgement and awareness of leading internal assurance practices.
• Professionalism, emotional intelligence, influencing and interpersonal skills, combined with clear written and verbal communication and the ability to provide constructive challenge respectfully.
• Ability to lead, coach and inspire a team to deliver agreed goals, quality standards and professional development objectives.
• Demonstrates behaviors aligned to the Clicks Group values by fostering respect, integrity, inclusion, collaboration and accountability in all team and stakeholder interactions.
  

COMPETENCIES

• Deciding and Initiating Action
• Leading and Supervising
• Adhering to Principle and Values
• Persuading and InfluencingPresenting and Communicating Information
• Applying Expertise and Technology
• Delivering Results & Meeting Customer Expectations