IT Audit Manager

Discovery; Sandton; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Discovery Group Internal Audit is seeking an IT Audit Manager to lead IT audits, provide assurance over controls and risk management, and coordinate with senior management and committees in a fast-paced environment in Sandton, South Africa.

The ideal candidate will manage audit planning, define scope, review findings, and drive timely action on control improvements. A CISA, COSO knowledge, and senior IT audit experience are essential for success.

Qualifications

• B Degree or equivalent qualification (Honours/Masters preferred).
• CISA certification is required.
• CIA / ACCA / CIMA / CFSA / CPA / CIA / CISM / CRISC / CGIT / CCSA (one or more preferable).
• Experience in conducting financial, operational or IT audits.
• Reporting to Audit and/or Risk Committees.

Responsibilities

• Plan, schedule and assign audit resources.
• Define purpose, scope and audit approach for each audit.
• Agree audit scope with client and obtain engagement letters for approval.
• Ensure risks are addressed for audit engagements.
• Provide feedback on planning, execution and reporting of audits.
• Review and sign-off planning papers, RACM, and reports; raise notes as needed.
• Monitor audit quality and escalate issues.
• Provide training and supervision to audit staff.
• Assist in developing the Audit Universe, Annual Internal Audit Plan and 3 Year Rolling Plan.
• Monitor progress of audits against the plan.
• Coordinate with external audit where applicable.
• Prepare and present risk and audit committee reports.

Skills

IT Audit

Cyber security

Risk management

COSO

Internal controls

Education

Bachelor degree or equivalent

CISA

CIA/ACCA/CIMA/CFSA/CPA/CIA/CISM/CRISC/CGIT/CCSA

Tools

Pentana

Job description

Discovery Group Internal Audit

IT Audit Manager

About Discovery

Discovery’s core purpose is to make people healthier and to enhance and protect their lives. We seek out and invest in exceptional individuals who understand and support our core purpose, and whose own values align with those of Discovery. Our fast-paced and dynamic environment enables smart, self- driven people to be their best. As global thought leaders, Discovery is passionate about innovating in order to not only achieve financial success, but to ignite positive and meaningful change within our society.

Group Internal Audit

Internal audit falls part of group finance, they are responsible for compiling internal audits throughout Discovery. They audit, work processes systems, and task completed. They compile their findings and present it to the area head

Key Purpose

The successful candidate will be responsible for completing audits inside Discovery and providing feedback on the outcome. The successful candidate must have a drive, sense of urgency and work flexibility.

Areas of responsibility may include but not limited to

• Scheduling and planning of audits, assignment of staff and review resource requirements.
• Defining the purpose, scope and audit approach of each audit for assigned areas of audit coverage.
• Agree audit scope with client and provide final engagement letter to Senior IT Audit Manager for approval and distribution.
• Ensuring that all risks are addressed for the specific audit engagements.
• Provide feedback to Senior IT Audit Manager on the planning, execution and reporting of the audits.
• Review and sign-off of planning, working papers and reports, and where required raise review notes for the work performed by Senior IT Auditors / IT Auditors (pertaining to Engagement Letters, Audit Planning Memos (“APMs”), system descriptions, walkthroughs, process flow diagrams, Risk and Control Matrix (“RACM”), test procedures, working papers, reports and action plans).
• Address review notes raised by the Senior IT Audit Manager.
• Monitoring of the quality of work performed by the audit team and taking corrective action (where applicable).
• Provide training and supervision to audit team in order to ensure that that the required audit objectives are met and that adequate practical coverage is achieved.
• Assist Senior IT Audit Manager in developing the Audit Universe, Annual Internal Audit Plan, and the Three Year Rolling Plan.
• Monitor progress of audits against plan.
• Track progress /changes in business risks and align audit plan.
• Request feedback from management.
• Escalate cases where feedback is not received.
• Ultimately responsible for quality of audit files (Pentana or other).
• Proactively take on additional tasks as requested by Senior IT Audit Manager.
• Provide meaningful input and monitor the effective and timely implementation of management actions to address any control weaknesses identified through risk profiling, risk events and control self- assessment.
• Conduct a Quality Assurance review of audit files and finalise once comfortable.
• External audit – develop and manage the relationship with external audit as it pertains to the reliance on IT Audit work, data requirements and co-ordination of resources to deliver specific assurance for external audit.
• Drafting and reviewing of engagement letters and final reports for Senior Management review.
• Review of draft observations and forwarding these to business for comment.
• Reporting to:
  • Audit Committees
  • Business Risk Committees
  • Company Excos
  • Management (detailed audit reports)
  • CAE (where applicable)

• Preparation and submission of Risk and Audit committee reports / packs.
• Attending Audit Committees, Risk Committee and Steering Committee meetings, as and when required.
• Assist in periodic reporting on the status and results of the annual audit plan and the sufficiency of department resources.
• Perform Peer Quality Review Assessments.
• Ad-hoc reporting.

Education and Experience

• B Degree or equivalent (and relevant) qualification. (Honours / Masters (with Computer Science / Computer Auditing / Information Systems / Auditing as majors)
• CISA (is required)
• CIA / ACCA / CIMA / CFSA / CPA / CIA / CISM / CRISC / CGIT / CCSA (one or more of the afore mentioned is preferable)
• Experience in conducting financial, operational or IT audits.
• Reporting to Audit and/or Risk Committees.

Essential knowledge:

• Internal Controls
• Risk management framework (COSO)
• IT General Control reviews
• Application Control reviews
• Internal controls
• Corporate and IT governance
• IT Infrastructure technical knowledge (reviewing of databases and operating systems)
• Cyber security
• Corporate governance principles
• Computer literacy

Personal Attributes

• Upholds ethics and values and demonstrates integrity
• Takes initiative and works under own direction with the ability to make quick, clear choices which may include tough choices or considered risks
• Shows respect for the views and contributions of others.
• Strong negotiating and influencing skills.
• Excellent communication skills. The candidate should speak fluently, have the ability to write in a well-structured and logical manner.
• Demonstrates an understanding of different organisational departments and functions.

EMPLOYMENT EQUITY

The Company’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we actively encourage and welcome people with various disabilities to apply.