IT Internal Auditor

---

Job description

Primary Responsibilities

• Provide Business and IT management with guidance on IT risk management matters, particularly on application and infrastructure security.
• Conduct IT audits and reviews of systems, applications and IT processes. Prepare and report results to management.

These include;

• Evaluate information general computing controls and provide value added feedback. Test compliance with those controls. Coordinate with IT and SOX teams.
• IT security audits (e.g. network, application and operating systems and data center operations). Coordinate these reviews, when necessary with business units and external security experts.
• Perform various other reviews of IT management policies and procedures such as change management, business continuity planning/ disaster recovery and information security to ensure that controls surrounding these processes are adequate.
• Support audit team in operational / financial audits.

Qualifications & Skills

Education and Training:

• Recognized IT auditing and information system certifications (CISA, CISM, CISSP)
• Understanding of multiple technology domains including software development, database management, networking, IT asset and license management, access management, business continuity, 3rd party vendor management.
• Understanding of information security standards, best practices for securing computer systems, and applicable laws and regulations.

Professional Experience

• Minimum 5 years of experience in IT Governance/IT Audit - internal audit or external auditing firm.

Skills Requirements:

• Outstanding interpersonal and communications skills; ability to communicate effectively with technical and non-technical audiences.
• Expert knowledge of internal auditing, internal controls, risk management and finance and accounting practices and methods.
• Comprehensive understanding of internal control environments within the IT function.
• Excellent teamwork skills.