Senior Internal Auditor: IT & Cyber Security

Sun International; Sandton; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Sun International is seeking a Senior Internal Auditor: IT & Cyber Security to lead risk-based assurance across the Group’s technology and cyber environments. The role owns and delivers the annual Internal Audit plan for the IT, Cyber Security and SunBet IT portfolio, assessing governance, security and information systems controls.

You will collaborate with stakeholders to strengthen governance, security and control practices, evaluate cloud and on-premise environments, and identify emerging

Qualifications

• Bachelor’s Degree in Information Technology, Computer Science or a related field.
• CISA and CIA certification required.
• Postgraduate qualification in Information Systems, Cyber Security, Auditing or Risk Management advantageous.
• CISM, CISSP and/or CRISC advantageous.

Responsibilities

• Lead risk-based assurance across IT, cyber security and SunBet IT portfolio.
• Own and deliver annual Internal Audit plan for IT, Cyber Security and SunBet IT portfolio.
• Assess technology governance, cyber security, cloud environments, digital platforms, system implementations and information systems controls.
• Provide independent assurance on the effectiveness of risk management and controls.
• Identify emerging technology risks and partner with stakeholders to strengthen governance, security and control practices across the business.

Skills

IT Audit & Assurance

Cyber Security & Risk Management

IT Audit Methodologies

Cyber Security Frameworks

Network Security & Architecture

Cloud Security

Technology Governance

System & Digital Platform Assurance

Data Protection & RegulatoryCompliance

Data Analysis & Audit Tools

Risk Management

Technical Report Writing

Audit Planning & Control Testing

Technology Risk Assessment

Stakeholder Management & Influence

Education

Bachelor’s Degree in Information Technology / Computer Science or related field

CISA

CIA

Postgraduate qualification in IS / Cyber Security / Auditing / Risk Management advantageous

CISM

CISSP

CRISC

Tools

ACL

SQL

Job description

The Senior Internal Auditor: IT & Cyber Security is responsible for leading risk-based assurance across the Group’s technology and cyber environments. The role owns and delivers the annual Internal Audit plan for the IT, Cyber Security and SunBet IT portfolio, assessing technology governance, cyber security, cloud environments, digital platforms, system implementations and information systems controls. It provides independent assurance on the effectiveness of risk management and controls, identifies emerging technology risks, and partners with key stakeholders to strengthen governance, security and control practices across the business.

Core behavioural & Technical / proficiency competencies:

Behavioural

• Continuous Improvement
• Integrity
• Teamwork
• Collaboration
• Transparency
• Adaptability
• Problem-Solving
• Customer Centricity
• Lifelong Learning
• Respect for Diversity

Technical

• IT Audit & Assurance
• Cyber Security & Risk Management
• IT Audit Methodologies - COBIT & ISO 27001
• Cyber Security Frameworks - NIST & CIS Controls
• Network Security & Architecture
• Cloud Security - AWS, Azure & GCP
• Technology Governance
• System & Digital Platform Assurance
• Data Protection & Regulatory Compliance
• Data Analysis & Audit Tools - ACL & SQL
• Risk Management
• Technical Report Writing
• Audit Planning & Control Testing
• Technology Risk Assessment
• Stakeholder Management & Influence

Qualifications

• Bachelor’s Degree in Information Technology, Computer Science or a related field.
• Certified Information Systems Auditor (CISA) and Certified Internal Auditor (CIA) - required.
• Postgraduate qualification in Information Systems, Cyber Security, Auditing or Risk Management advantageous.
• CISM, CISSP and/or CRISC advantageous.

Experience

• 8-10 years’ experience in IT Audit and Cyber Security Assurance.
• Strong experience auditing cloud environments, technology governance and cyber security control frameworks.
• Proven experience evaluating system implementations, access controls and data protection processes.
• Exposure to online gaming, digital platforms or complex regulated IT environments advantageous.

Sun International is committed to employment equity and encourages applications from suitably qualified candidates.

Only shortlisted candidates will be contacted.

If you have not heard from us within 14 days of the closing date, please consider your application unsuccessful.