Role Overview

Work within Group Internal Audit to compile audits of processes, systems and completed tasks, document findings and present them to area leadership. Evaluate, monitor and improve the effectiveness of information systems, technology controls, security processes and compliance with policies and regulatory requirements. The role helps ensure IT environments are secure, efficient and aligned with business objectives.

Duties and Responsibilities

Strategic

Attend to management queries.
Build and maintain relationships with business areas and other assurance providers.
Oversee internal auditing across the group from an inherent- and residual-risk perspective.
Challenge risk-management information and provide meaningful input on improving IT risk processes and controls.

Technical and Operational

Review IT general controls, application controls, technical infrastructure, project and programme management, cyber and information security, data assurance and data analytics.
Ensure audits are performed in line with audit methodology.
Provide feedback to Audit Management on audit planning, execution and reporting.
Define the purpose, scope and approach for assigned audits.
Prepare or review system descriptions, walkthroughs, process-flow diagrams, risks-and-controls matrices and test procedures.
Obtain approvals for changes to controls, test procedures and sample sizes.
Perform testing and document working papers on audit software.
Review working papers and raise review notes where applicable.
Prepare or review audit-finalisation checklists.
Supervise IT Auditors and their work, provide progress updates, track budgets and timesheets, and escalate risks to deadlines.
Monitor audit quality, provide training and supervision, and remain ultimately responsible for the quality of audit files.
Provide input into the implementation of management actions addressing control weaknesses.

Follow-ups and Development

Follow up outstanding audit issues and management actions.
Prepare progress reports for risk and audit committees.
Support self-development, training, mini-appraisals and continuous improvement of audit methodology.
Stay current with internal-audit and industry developments.
Travel when required.

Experience and Qualifications

B Degree or equivalent relevant qualification with Computer Science, Computer Auditing, Information Systems or Auditing as a major.
One or more of CIA, CISA, CISM, CRISC or CGIT required.
At least two years' audit experience.
Experience with IT general-control reviews and application-control reviews.
Knowledge of internal controls, COSO risk-management frameworks, corporate and IT governance, IT infrastructure, databases, operating systems, CAATs, data analytics, cyber security and information security.
Studying towards or holding a relevant Bachelor's or Honours degree and financial-services experience would be advantageous.
Analytical thinking, clear communication, relationship building and strong reporting skills.