What you will be doing:
- Plan, execute and finalise IT audit engagements in accordance with the organisation's audit methodology.
- Assist with determining the scope and approach of IT audit assignments based on identified risks.
- Perform IT risk assessments and contribute to the maintenance of IT risk profiles.
- Evaluate IT risks, controls and governance frameworks and provide recommendations for improvement.
- Perform and review IT General Controls (ITGC) assessments.
- Perform and review Application Controls testing.
- Assess technology infrastructure, systems, databases and operating environments.
- Conduct audits relating to areas such as information security, cybersecurity and technology risk.
- Apply data analytics and/or Computer-Assisted Audit Techniques (CAATs) where appropriate.
- Prepare and review audit planning documentation, system descriptions, walkthroughs, process flow diagrams, RACMs and audit test procedures.
- Perform audit testing and maintain high-quality working papers.
- Review audit working papers and provide constructive feedback where required.
- Identify control weaknesses, document audit findings and assist with the preparation of audit reports.
- Engage with business stakeholders to obtain management responses and agree appropriate remediation actions.
- Monitor and follow up on outstanding audit findings and management actions.
- Provide regular progress updates to Audit Management.
- Assist with monitoring audit budgets, timelines and deliverables.
- Provide guidance, training and support to other IT Auditors where required.
- Build and maintain strong relationships with business stakeholders and other assurance providers.
- Keep abreast of developments in IT audit, technology, cybersecurity, governance and risk management.
- Contribute to the ongoing improvement of audit methodologies and processes.
What we are looking for:
- Relevant Bachelor's degree or equivalent qualification in Computer Science, Information Systems, Computer Auditing, Auditing or a related field.
- At least one relevant completed professional certification such as CIA, CISA, CISM, CRISC, or CGIT (essential)
- 4+ years' experience in IT Auditing across a broad range of IT audit activities.
- Experience conducting financial, operational and/or IT audits.
- Strong knowledge of:
- IT General Controls
- Application Controls
- Internal Controls
- IT Risk Management
- Corporate and IT Governance
- IT Infrastructure
- Cybersecurity and Information Security
- Data Analytics / CAATs
- Experience with audit planning, testing, documentation, reporting and follow-up.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to engage confidently with both technical and non-technical stakeholders.
This is an opportunity to join a high-performing Internal Audit environment where you will have exposure to complex technology risks, systems and business areas, while playing an important role in strengthening technology controls and governance.
We are looking for candidates who enjoy challenging the status quo, engaging with stakeholders and taking ownership of audit outcomes, rather than simply executing predefined testing, will thrive in this role.