IT Internal Auditor (Application Control Reviews)

FirstRand; Johannesburg; On-site; ZAR 480,000 - 720,000; Full time

Job summary

FirstRand is seeking an Internal Auditor (ACR) to perform moderate-complexity internal audits, evaluating IT controls and regulatory compliance across processes and projects. You will identify risks, propose practical improvements, and strengthen governance and efficiency within a banking context.

The role emphasizes planning, data analytics integration, and clear evidence-based reporting, with a focus on IT controls, information security, and disaster recovery within FirstRand's environment.

Qualifications

• Bachelor's degree in Information Systems or an equivalent qualification is required.
• Minimum 3 years of Application Control Reviews (ACR) or project auditing experience.
• Experience with data analytics/CAATs is advantageous; banking/financial services exposure is a plus.

Responsibilities

• Understand IT control environment and interdependencies with business processes and risk management.
• Plan audits based on process risks and design audit programs focusing on IT application controls.
• Incorporate data analytics to enhance audit planning and fieldwork efficiency.
• Execute audit fieldwork in line with quality standards and assess governance, risk management and controls.
• Evaluate IT areas like information security, operations management, and disaster recovery related to IT controls.
• Provide clear audit evidence to support recommendations and opinions.

Skills

Data analytics

CAATs

Education

BSC/BCom (Information Systems) or equivalent

Tools

CAATs tools

Job description

Job Description

To conduct internal audits of moderate complexity to evaluate the effectiveness of internal controls and ensure compliance with policies and regulations. Identify risks and control gaps, provide practical recommendations to enhance operational efficiency and strengthen governance.

Hello future Internal Auditor - ACR

FirstRand believes that its people are its single most important resource and will not operate in a sector unless it has people who are right for that market and who share FirstRand's business values. We recruit self-starters who have a passion for what they do. We empower them, hold them accountable and reward them appropriately. We value diversity in our people, particularly for the way that this contributes to innovative thinking. If you think you will flourish in our environment, and you believe you have the necessary skills and competencies for the position advertised, then we are looking for you!

Are you someone who can:

• Obtain a good understanding of the IT control environment being audited (including link to business processes and risk management related aspects), and the interdependencies linked to this.
• Plan audit assignments based on key process and business risks identified and design the audit program in line with risks and key IT application controls to be tested.
• Incorporate data analytics (DA) to enhance audit planning and create efficiencies in audit fieldwork.
• Execute audit field work in compliance with quality standards by following and completing prepared work programs. Assess the adequacy and effectiveness of governance, risk management practices and internal controls.
• Evaluate IT areas such as information security, operations management, and disaster recovery procedures related to the IT application controls to be reviewed.
• Provide clear and sufficient audit evidence to support recommendations and audit opinion.
• Express an opinion based on the results of the work performed.
• Identify opportunities to improve the IT internal control environment and project management processes.
• Identify and clearly articulate the root cause of issues identified and impact thereof and recommend changes to business processes that will address the IT and Project control weaknesses.

You will be an ideal candidate if you:

• BSC / BCom (Information Systems) or equivalent degree.
• At least 3 years Application Control Reviews (ACR) and / or Project auditing experience.
• Experience with data analytics/ CAATs is an advantage.
• Experience in banking and financial services environment will be an advantage.

You will have access to:

• Challenging work in a complex and exciting environment
• Opportunities to innovate and create efficiencies.

We can be a match if you are:

• Curious & courageous - you're driven by always wanting to know more and learn more and you're brave enough to
• Obsessed with mastery - you know what it takes to become good at what you do and are constantly pushing yourself to do it.
• Have a general understanding of different risk types.

Important Closing Date Note

Take note that applications will not be accepted on the below date and onwards, kindly submit applications ahead of the closing date indicated below.

17/11/26

All appointments will be made in line with FirstRand Group's Employment Equity plan. The Bank supports the recruitment and advancement of individuals with disabilities. In order for us to fulfill this purpose, candidates can disclose their disability information on a voluntary basis. The Bank will keep this information confidential unless we are required by law to disclose this information to other parties.