Assistant Manager, IT Internal Audit

WHAT YOU GET TO DO

• Conduct technology focused audits independently end to end
• Review critical systems and processes to identify risks
• Benchmark existing systems controls and processes with industry best practices
• Conduct key control testing as per Sarbanes-Oxley (SOX) requirements
• Maintain audit documentation as per established processes
• Support external audit testing requirements as needed

WHAT ABOUT YOU? You have…

• Education: Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
• Certifications: Certifications like CISA (Certified Information Systems Auditor) is a must. Additional certifications like CISM, CISSP, CRISC or CIA may be preferred.
• Experience: 4 to 6 experience in IT audit, internal audit, or a related role.

Key Responsibilities:

1. Internal Audits: Plan, execute, and lead IT audits, including infrastructure, applications, information security and systems development audits.
2. Risk Assessment: Identify and evaluate IT-related risks across different areas of the business and recommend improvements to mitigate these risks.
3. Audit Reporting: Prepare audit findings, and present audit reports and recommendations to IT management regarding control weaknesses and areas of improvement.
4. Compliance: Ensure that IT control environment complies with relevant standards and regulations (such as SOX, GDPR, etc.), as well as internal policies.
5. Process Improvement: Provide recommendations for enhancing the efficiency and effectiveness of IT processes and systems.
6. Collaboration: Work closely with other departments to evaluate risks, systems, and controls, and implement changes as necessary.

Key Skills:

• Technical Knowledge: Familiarity with IT systems, cloud infrastructure, cybersecurity and related technology.
• Audit Skills: Knowledge of audit methodologies and standards and internal control frameworks like COBIT or COSO.
• Analytical Thinking: Ability to analyze risks, identify issues, gaps and identify areas for improvement.
• Communication Skills: Strong written and verbal communication skills for managing key stakeholder relationships, reporting findings and presenting to stakeholders.
• Risk Management: Understanding of risk management principles, particularly in an IT context.
• Attention to Detail: Thoroughness in reviewing systems and identifying potential weaknesses.