IT Internal Auditor (Application Control Reviews)

RMB Nigeria Limited; Johannesburg; On-site; ZAR 50,000 - 61,000; Full time

Job summary

FirstRand is seeking an IT Internal Auditor (Application Control Reviews) in Johannesburg to conduct moderate-complexity internal audits, evaluate IT controls, and strengthen governance. The role requires a degree in Information Systems and 3+ years of ACR/project auditing experience, with CAATs/data analytics preferred.

The candidate will plan audits, test IT application controls, assess governance and risk practices, and provide practical recommendations to enhance operational efficiency.

Qualifications

• BSC / BCom (Information Systems) or equivalent degree.
• At least 3 years Application Control Reviews (ACR) and/or Project auditing experience.
• Experience with data analytics/CAATs is an advantage.
• Experience in banking and financial services environment will be an advantage.

Responsibilities

• Understand the IT control environment being audited and its interdependencies with business processes and risk management.
• Plan audit assignments based on process and business risks and design audit programs for IT controls.
• Incorporate data analytics to enhance audit planning and fieldwork efficiency.
• Execute audit field work in line with quality standards and prepared work programs.
• Assess the adequacy and effectiveness of governance, risk management and internal controls.
• Evaluate IT areas such as information security, operations management and disaster recovery related to IT controls.
• Provide clear audit evidence to support recommendations and opinions.
• Express an informed opinion based on audit results.
• Identify opportunities to improve IT internal controls and project management processes.
• Articulate root causes and impacts and recommend changes to address weaknesses.

Education

BSC / BCom (Information Systems) or equivalent degree

Tools

CAATs

Job description

## IT Internal Auditor (Application Control Reviews)Apply: Johannesburg: Full time: Posted Today: End Date: November 17, 2026 (7 days left to apply): R55054# **Job Description**To conduct internal audits of moderate complexity to evaluate the effectiveness of internal controls and ensure compliance with policies and regulations. Identify risks and control gaps, provide practical recommendations to enhance operational efficiency and strengthen governance.**Hello future Internal Auditor - ACR**FirstRand believes that its people are its single most important resource and will not operate in a sector unless it has people who are right for that market and who share FirstRand’s business values. We recruit self-starters who have a passion for what they do. We empower them, hold them accountable and reward them appropriately. We value diversity in our people, particularly for the way that this contributes to innovative thinking. If you think you will flourish in our environment, and you believe you have the necessary skills and competencies for the position advertised, then we are looking for you! **Are you someone who can:*** Obtain a good understanding of the IT control environment being audited (including link to business processes and risk management related aspects), and the interdependencies linked to this.* Plan audit assignments based on key process and business risks identified and design the audit program in line with risks and key IT application controls to be tested.* Incorporate data analytics (DA) to enhance audit planning and create efficiencies in audit fieldwork.* Execute audit field work in compliance with quality standards by following and completing prepared work programs. Assess the adequacy and effectiveness of governance, risk management practices and internal controls.* Evaluate IT areas such as information security, operations management, and disaster recovery procedures related to the IT application controls to be reviewed.* Provide clear and sufficient audit evidence to support recommendations and audit opinion.* Express an opinion based on the results of the work performed.* Identify opportunities to improve the IT internal control environment and project management processes.* Identify and clearly articulate the root cause of issues identified and impact thereof and recommend changes to business processes that will address the IT and Project control weaknesses. **You will be an ideal candidate if you:*** BSC / BCom (Information Systems) or equivalent degree.* At least 3 years Application Control Reviews (ACR) and / or Project auditing experience.* Experience with data analytics/ CAATs is an advantage.* Experience in banking and financial services environment will be an advantage. **You will have access to:** * Challenging work in a complex and exciting environment* Opportunities to innovate and create efficiencies. **We can be a match if you are:** * Curious & courageous - you're driven by always wanting to know more and learn more and you're brave enough to* Obsessed with mastery - you know what it takes to become good at what you do and are constantly pushing yourself to do it.* Have a general understanding of different risk types. **Are you interested to take the step? We look forward to engaging with you further. Apply now!**# # **Important Closing Date Note**# **Take note that applications will not be accepted on the below date and onwards, kindly submit applications ahead of the closing date indicated below.**17/11/26All appointments will be made in line with FirstRand Group’s Employment Equity plan. The Bank supports the recruitment and advancement of individuals with disabilities. In order for us to fulfill this purpose, candidates can disclose their disability information on a voluntary basis. The Bank will keep this information confidential unless we are required by law to disclose this information to other parties.