WHAT YOU GET TO DO
- Conduct technology focused audits independently end to end
- Review critical systems and processes to identify risks
- Benchmark existing systems controls and processes with industry best practices
- Conduct key control testing as per Sarbanes-Oxley (SOX) requirements
- Maintain audit documentation as per established processes
- Support external audit testing requirements as needed
WHAT ABOUT YOU? You have…
-
Education: Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
-
Certifications: Certifications like CISA (Certified Information Systems Auditor) is a must. Additional certifications like CISM, CISSP, CRISC or CIA may be preferred.
-
Experience: 4 to 6 experience in IT audit, internal audit, or a related role.
Key Responsibilities:
-
Internal Audits: Plan, execute, and lead IT audits, including infrastructure, applications, information security and systems development audits.
-
Risk Assessment: Identify and evaluate IT-related risks across different areas of the business and recommend improvements to mitigate these risks.
-
Audit Reporting: Prepare audit findings, and present audit reports and recommendations to IT management regarding control weaknesses and areas of improvement.
-
Compliance: Ensure that IT control environment complies with relevant standards and regulations (such as SOX, GDPR, etc.), as well as internal policies.
-
Process Improvement: Provide recommendations for enhancing the efficiency and effectiveness of IT processes and systems.
-
Collaboration: Work closely with other departments to evaluate risks, systems, and controls, and implement changes as necessary.
Key Skills:
-
Technical Knowledge: Familiarity with IT systems, cloud infrastructure, cybersecurity and related technology.
-
Audit Skills: Knowledge of audit methodologies and standards and internal control frameworks like COBIT or COSO.
-
Analytical Thinking: Ability to analyze risks, identify issues, gaps and identify areas for improvement.
-
Communication Skills: Strong written and verbal communication skills for managing key stakeholder relationships, reporting findings and presenting to stakeholders.
-
Risk Management: Understanding of risk management principles, particularly in an IT context.
-
Attention to Detail: Thoroughness in reviewing systems and identifying potential weaknesses.
