Senior Analyst

BDO South Africa; Rosebank; On-site; ZAR 600,000 - 900,000; Full time

Job summary

BDO South Africa's Financial Services Advisory practice seeks a Senior IT External Auditor to deliver IT audit engagements for banks, insurers and asset managers in Cape Town or Johannesburg. You will assess IT general controls, application controls, data analytics and contribute to audit opinions with robust evidence.

Collaborating with client IT teams and audit engagement groups, you will plan testing strategies, document findings, and communicate outcomes clearly while upholding ISA standards

Qualifications

• Degree in Information Systems, IT, Computer Science, Accounting, or related field.
• Relevant certifications (CISA, CIA, CA(SA)) preferred.
• Experience in IT audit, external audit, or risk advisory.

Responsibilities

• Perform IT audit procedures over key systems relevant to financial reporting.
• Evaluate the design and operating effectiveness of IT general controls, including user access management, change management, IT operations.
• Assess automated and interface controls supporting financial processes.
• Document audit work, findings and conclusions per audit methodology.

Skills

IT general controls

Application controls

Data analytics

Education

Degree in Information Systems, IT, Computer Science, Accounting, or related field

Certifications advantageous (e.g., CISA, CIA, CA(SA))

Job description

The Senior Analyst will join BDO’s Financial Services Advisory practice in Cape Town or Johannesburg, supporting assurance engagements across banks, insurers, asset managers, and other regulated financial institutions.

The IT External Auditor is responsible for supporting the delivery of external audit engagements by assessing IT general controls (ITGCs), application controls, interface testing, data analytics and executing procedures to support the financial audit opinion. The role ensures that technology risks impacting financial reporting are appropriately identified, tested, and addressed.

The individual will work closely with audit engagement teams and client stakeholders to deliver high-quality, timely audit outcomes in line with applicable auditing standards and firm methodology.

Key Responsibilities

Audit Delivery

• Perform IT audit procedures over key systems relevant to financial reporting
• Evaluate the design and operating effectiveness of IT general controls, including:
  • User access management
  • Change management
  • IT operations (e.g., job monitoring, backups)
• Assess automated controls and interface controls supporting financial processes
• Document audit work, findings, and conclusions in line with audit methodology

Planning & Risk Assessment

• Assist in identifying risks associated with IT systems impacting financial statements
• Support the development of IT audit plans and procedures aligned to engagement risks
• Liaise with financial audit teams to ensure appropriate IT audit scoping

Stakeholder Engagement

• Engage with client IT and business stakeholders to request and obtain audit evidence
• Facilitate discussions to understand system processes and controls
• Communicate audit findings and observations clearly and professionally

Reporting

• Identify control deficiencies and articulate clear, concise audit findings
• Assist in preparing IT audit reports and deliverables for inclusion in audit opinions
• Support timely communication of issues to management and audit teams

Quality & Compliance

• Ensure work performed complies with auditing standards (e.g., ISA) and firm methodology
• Maintain appropriate documentation and audit trails
• Uphold independence and objectivity requirements as an external auditor

Technical Skills

• Understanding of IT general controls and application controls
• Knowledge of financial reporting processes and risks
• Familiarity with audit methodologies and working papers
• Exposure to data analytics tools (advantageous)

Behavioural Competencies

• Strong analytical and problem‑solving skills
• Attention to detail and high quality of work
• Effective communication and stakeholder management
• Ability to work under pressure and meet deadlines
• Professional integrity and ethical conduct

Qualifications

• Degree in Information Systems, IT, Computer Science, Accounting, or related field
• Relevant certifications advantageous (e.g., CISA, CIA, CA(SA))
• Experience in IT audit, external audit, or risk advisory

Experience

• 2-4 years’ experience in Internal Audit, IT Audit, Risk Advisory, or related assurance roles
• Prior exposure to Financial Services clients (e.g. banking, insurance, asset management) is strongly advantageous
• Experience working within structured audit engagements or advisory projects

Technical Knowledge & Frameworks

• Foundational understanding of IT external audit methodologies and risk‑based auditing
• Working knowledge of IT risk management, IT governance, and internal control concepts
• Familiarity with frameworks such as COBIT, ITIL, and ISO 27001 is advantageous

Core Competencies

• Strong analytical and problem‑solving skills
• Clear verbal and written communication
• Ability to plan, organise, and execute audit work effectively
• Client‑focused and professional in stakeholder interactions
• Willingness to learn and adapt in a fast‑paced advisory environment
• Emotional intelligence and strong teamwork capabilities
• Commitment to continuous professional development