Senior IT Auditor

Clicks Group; Wes-Kaap; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Clicks Group seeks a Senior IT Auditor – Technology & Project Assurance to join the Group Internal Audit team at the Cape Town head office. You will provide independent, risk-based assurance over the group’s technology environment, major IT projects and digital transformation initiatives.

You will plan and execute IT audits, evaluate IT general controls, cybersecurity and data governance, and report findings with practical recommendations to strengthen governance and controls.

Qualifications

• 5–7 years IT audit experience.
• Experience evaluating IT General Controls.
• Experience auditing applications and technology projects.
• Strong analytical skills with data analytics or visualization tools.
• Understanding of internal audit methodology and IT governance standards.

Responsibilities

• Provide independent, risk-based assurance over technology controls and major IT projects.
• Plan and execute IT audits across key technology domains.
• Review project governance, business cases and funding approvals.
• Assess project readiness, security, testing and change management.
• Prepare committee packs and follow up on audit findings and actions.
• Maintain stakeholder relationships and provide practical recommendations.

Skills

IT audit

Data analytics

Risk assessment

Stakeholder management

Communication skills

Analytical mindset

Education

CISA

CRISC

PMP/PRINCE2/PMBOK (advantageous)

Tools

Power BI

SAP Analytics

Microsoft Office

SAP S/4HANA (advantageous)

Job description

We are looking to recruit a Senior IT Auditor – Technology & Project Assurance to work within the Group Internal Audit department of Clicks GroupServices. The role will be based at Clicks Head Office in Cape Town and will report to the IT Audit Manager.

JOB DESCRIPTION

To provide independent, risk-based assurance over the group’s technology environment, major IT projects and digital transformation initiatives. Therole is responsible for planning and executing IT audit engagements, performing project assurance reviews across the project lifecycle, evaluatingtechnology risks and controls, and providing practical recommendations that strengthen governance, risk management and control.The role supports the delivery of the Internal Audit Plan while acting as a trusted advisor on technology risk during major business and IT changeinitiatives.

JOB OBJECTIVES

• Provide independent assurance over the effectiveness of technology controls by planning and executing risk-based IT audits across keytechnology domains, including IT general controls, cybersecurity, cloud, infrastructure, data governance, resilience, third-party technology risk,and emerging technologies.
• Performing risk assessments, evaluating control design and effectiveness, leveraging data analytics, identifying control weaknesses and rootcauses, developing practical recommendations, reporting audit results, and monitoring the implementation of agreed corrective actions.

Project Assurance

• Provide independent assurance over strategic business and technology projects throughout their lifecycle to ensure effective governance, riskmanagement, control execution, implementation readiness, and achievement of intended business outcomes.
• Review project governance, business cases, funding approvals, and accountability structures.
• Assess project planning disciplines, including scope, budget, resources, vendors, risk management, quality management, and changemanagement.
• Evaluate project execution to ensure effective management of risks, controls, testing, security requirements, issue resolution, and key projectchanges.
• Assess organisational and technical readiness for implementation, including operational preparedness, support models, security approvals,disaster recovery, and business continuity arrangements.
• Conduct post-implementation reviews to confirm project objectives and benefits have been achieved, controls are operating effectively, lessonslearned have been captured, and residual risks are acceptable.
• Ensure methodical documentation of risk and control matrices, testing results, conclusions and recommendations. Ensure follow up on findingsand corrective actions.
• Provide input and assist with the preparation and review of the various committee packs.
• Continued combined assurance approach to ensure maximum reliance by external audit on the work of internal audit.
• Successful working relationship with the key stakeholders, while providing quality independent audit assurance on the risks that matter.
• Proactively inform senior management of significant risks or exposures related to internal controls, compliance, and/or governance requiringprompt attention.
• Staying abreast of emerging technologies, industry trends and regulatory requirements impacting IT audit practises.
• Any other ad-hoc

Education

• CISA, CRISC or relevant professional qualification is essential.
• PMP or PRINCE2 or PMBOK certification (advantageous)

Job Related Knowledge

• 5–7 years IT Audit experience.
• Experience evaluating IT General Controls.
• Experience auditing applications and technology projects.
• Strong analytical skills in the use of data analytics or visualisation tools
• Understanding of the internal audit methodology
• Strong understanding of Global Internal Audit Standards (IIA 2024), Risk-based auditing, COBIT, ISO 27001, ITIL, PMBOK and/or PRINCE2
• SDLC
• Experience with tools such as:
• Power BI
• SAP analytics (advantageous)
• Microsoft products
• Experience performing project assurance over major technology programmes (Advantageous)
• Experience with ERP implementations (e.g. SAP S/4HANA). (Advantageous)
• Experience in retail, financial services or other large complex organisations (Advantageous)

Job Related Skills

• Ability to work under pressure and adhere to tight deadlines.
• Analytical and problem-solving skills.
• Professionalism, empathy, influencing, and interpersonal skills, combined with clear written / verbal communications.
• Treats all employees with dignity and respect and does not engage in intimidating, aggressive or disrespectful behaviours.
• Team player
• Deciding and Initiating Action
• Leading and Supervising
• Adhering to Principle and Values
• Persuading and Influencing
• Presenting and Communicating Information
• Applying Expertise and Technology
• Delivering Results & Meeting Customer Expectations