Senior It Auditor

Road Accident Fund; South Africa; On-site; ZAR 600,000 - 1,000,000; Full time

Job summary

Road Accident Fund is seeking an IT Auditor to report to the Manager: IT Audit and oversee junior staff. You will plan, execute and supervise IT audits according to internal methodology, document findings, and present mitigate actions.

The role requires solid knowledge of IT controls, governance, risk management, and cybersecurity practices. Collaboration with stakeholders across departments is essential, with focus on quality assurance and regulatory compliance.

Qualifications

• Bachelor’s Degree/Advanced Diploma in Auditing, Computer Auditing, or IT-related field.
• Registration with IIA and/or ISACA.
• CISA certification is compulsory.
• CRISC/CISM/CGEIT is an added advantage.
• 5–7 years’ experience in auditing.
• Experience in SAP Basis, GCRs, ACRs, SDLC and Cyber Security.

Responsibilities

• Plan and conduct audits per Internal Audit Methodology.
• Perform preliminary surveys to understand audit areas.
• Document planning papers with auditee and confirm changes.
• Formulate audit programs from survey outcomes.
• Allocate audit work and manage hours.
• Provide regular progress updates to IT Audit Manager.
• Review working papers for completeness and accuracy.
• Review system descriptions and risk analyses.
• Contribute to policy, procedures and process improvements.
• Keep up to date with policy execution strategies.
• Prepare draft audit reports addressing objectives.
• Address review notes and capture close-out minutes.
• Track progress on findings and conduct follow-ups.
• Provide assurance and recommend controls per laws and frameworks.
• Manage communication with stakeholders and maintain relationships.

Skills

IT auditing

SAP Basis

GCR

ACR

SDLC

Cyber security

IT governance

COBIT/ITIL/ISO

CAATS tools

ACL

TeamMate

MS Office

Communication

Stakeholder management

Education

Bachelor’s Degree/Advanced Diploma in Auditing, Computer Auditing or IT

Registration with IIA and/or ISACA

CISA certification compulsory

CRISC/CISM/CGEIT added advantage

5–7 years auditing experience

Experience in SAP Basis, GCRs, ACRs, SDLC and Cyber Security

Tools

SAP Basis

ACL

TeamMate

Job description

Purpose of the Job: Reporting to the Manager: IT Audit, the successful incumbent is responsible for conducting IT audits as per the audit plan and supervise junior staff.

Key Performance Areas

Plan the Implementation of Specific Audits

• Plan and conduct audits as per the approved Internal Audit Methodology.
• Conduct preliminary survey to understand the area to be audited.
• Document and complete the planning documents (system description and risk and control gap analysis) with the auditee (opening meeting) for confirmation and indication of changes that need to be effected.
• Discuss the planning documents with the auditee after the opening meeting for confirmation of changes that need to be effected.
• Formulate the audit program based on the outcome of the preliminary survey using appropriate audit methodologies.

Supervise the Audit Process

• Allocate audit work to auditors as per RACM and manage hours for the audit team.
• Provide regular team progress to the IT Audit Manager.
• Conduct and supervise the audit as per the RACM.
• Review working papers for completeness and accuracy before submission to the IT Audit Manager.
• Review the system descriptions and risk and control gap analysis performed by the internal auditors.

Policy Review and Implementation

• Contribute to the development and implementation of departmental policy, procedures and processes.
• Keep up to date with effective policy and practice execution strategies.

Reporting

• Prepare and submit draft audit report with findings addressing audit objectives and scope to the IT Audit Manager.
• Address review notes from the IT Audit Manager and capture close-out meeting minutes.
• Track the auditee’s progress in resolving findings by conducting follow-ups.
• Provide assurance and recommend controls to business units in accordance with the relevant laws and regulations and National Treasury frameworks.

Stakeholder Management

• Facilitate and manage communication with relevant internal and external stakeholders in relation to investments and proactively and progressively manage the relationships.
• Communicate with all levels of stakeholder contacts.

Qualifications and Experience

• Bachelor’s Degree/ Advanced Diploma in Auditing, Computer Auditing, Information Technology related qualification.
• Registered with the Institute of Internal Auditors and/or ISACA.
• CISA is compulsory.
• CRISC/ CISM/ CGEIT will be an added advantage.
• Relevant 5 - 7 years’ experience in an auditing environment.
• Experience in the completion of SAP Basis, General Controls Reviews (GCR’s) as well as Application Controls Reviews (ACR’s), SDLC, and Cyber Security.

Technical and behavioral competencies required

• Communication.
• Working with people.
• Planning, organizing and coordinating.
• Employee engagement.
• Ethics and values.
• Client service orientation.
• Change management.
• Facilitation and presentation skills.
• Risk management.
• Reporting.
• Computer literacy and Internet.
• Analytical skills
• Principles of Project Management.
• Microsoft Office Suite.
• International Standards for the Professional Practice of Internal Auditing.
• Principles relating to Governance, Risk Management and Public Finance Management Act.
• Understanding of IT governance practices, IT risk management principles and Cyber Security principles
• Exposure to COBIT, ITIL, IIA and ISO standards
• Use of CAATS tools, preferably ACL
• Use of an audit management system, preferably TeamMate.

NB: “RAF offers Total Employment Cost packages with no additional contributions from the Employer, successful candidates are required to structure their packages in a manner that will suit their needs”.