Senior IT Auditor: Technology & Project Assurance

Clicks Group Limited; Cape Town; On-site; ZAR 700,000 - 1,000,000; Full time

Job summary

Clicks Group is seeking a Senior IT Auditor – Technology & Project Assurance to join Group Internal Audit in Cape Town. The role focuses on risk-based IT audits, major IT projects, and digital transformation initiatives, reporting to the IT Audit Manager.

You will evaluate IT general controls, cybersecurity, data governance, and third-party risk, and provide practical recommendations to strengthen governance, risk and controls. Knowledge of COBIT, ISO 27001 and PMBOK/PRINCE2 is advantageous.

Qualifications

• 5–7 years IT Audit experience.
• Experience evaluating IT General Controls.
• Experience auditing applications and technology projects.
• Strong data analytics or visualization skills.
• Knowledge of internal audit standards (IIA 2024) and frameworks (COBIT, ISO 27001, ITIL, PMBOK/PRINCE2).

Responsibilities

• Provide independent assurance over IT controls and major projects.
• Perform risk assessments, evaluate control design and effectiveness, and report results.
• Review project governance, funding approvals, and accountability structures.
• Assess project planning including scope, budget, resources, vendors, and risk management.
• Evaluate project execution and readiness for implementation including DR/BC.
• Conduct post-implementation reviews and track corrective actions.
• Prepare committee packs and support external audit engagement.
• Maintain combined assurance with stakeholders.

Skills

Analytical skills

Problem-solving

Communication skills

Teamwork

Stakeholder management

Education

CISA

CRISC

PMP or PRINCE2 or PMBOK

Tools

Power BI

SAP analytics

Microsoft products

Job description

Clicks Group is seeking a Senior IT Auditor – Technology & Project Assurance to join Group Internal Audit in Cape Town. The role focuses on risk-based IT audits, major IT projects, and digital transformation initiatives, reporting to the IT Audit Manager.

You will evaluate IT general controls, cybersecurity, data governance, and third-party risk, and provide practical recommendations to strengthen governance, risk and controls. Knowledge of COBIT, ISO 27001 and PMBOK/PRINCE2 is advantageous.