IT Internal Auditor - Risk & Controls Analyst

FirstRand; Johannesburg; On-site; ZAR 480,000 - 720,000; Full time

Job summary

FirstRand is seeking an Internal Auditor (ACR) to perform moderate-complexity internal audits, evaluating IT controls and regulatory compliance across processes and projects. You will identify risks, propose practical improvements, and strengthen governance and efficiency within a banking context.

The role emphasizes planning, data analytics integration, and clear evidence-based reporting, with a focus on IT controls, information security, and disaster recovery within FirstRand's environment.

Qualifications

• Bachelor's degree in Information Systems or an equivalent qualification is required.
• Minimum 3 years of Application Control Reviews (ACR) or project auditing experience.
• Experience with data analytics/CAATs is advantageous; banking/financial services exposure is a plus.

Responsibilities

• Understand IT control environment and interdependencies with business processes and risk management.
• Plan audits based on process risks and design audit programs focusing on IT application controls.
• Incorporate data analytics to enhance audit planning and fieldwork efficiency.
• Execute audit fieldwork in line with quality standards and assess governance, risk management and controls.
• Evaluate IT areas like information security, operations management, and disaster recovery related to IT controls.
• Provide clear audit evidence to support recommendations and opinions.

Skills

Data analytics

CAATs

Education

BSC/BCom (Information Systems) or equivalent

Tools

CAATs tools

Job description

FirstRand is seeking an Internal Auditor (ACR) to perform moderate-complexity internal audits, evaluating IT controls and regulatory compliance across processes and projects. You will identify risks, propose practical improvements, and strengthen governance and efficiency within a banking context.

The role emphasizes planning, data analytics integration, and clear evidence-based reporting, with a focus on IT controls, information security, and disaster recovery within FirstRand's environment.