Assistant Manager, IT Internal Audit

WHAT YOU GET TO DO

• Conduct technology focused audits independently end to end
• Review critical systems and processes to identify risks
• Benchmark existing systems controls and processes with industry best practices
• Conduct key control testing as per Sarbanes-Oxley (SOX) requirements
• Maintain audit documentation as per established processes
• Support external audit testing requirements as needed

WHAT ABOUT YOU?  You have…

• Education : Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
• Certifications : Certifications like CISA (Certified Information Systems Auditor) is a must. Additional certifications like CISM, CISSP, CRISC or CIA may be preferred.
• Experience : 4 to 6 experience in IT audit, internal audit, or a related role.

Key Responsibilities

• Internal Audits : Plan, execute, and lead IT audits, including infrastructure, applications, information security and systems development audits.
• Risk Assessment : Identify and evaluate IT-related risks across different areas of the business and recommend improvements to mitigate these risks.
• Audit Reporting : Prepare audit findings, and present audit reports and recommendations to IT management regarding control weaknesses and areas of improvement.
• Compliance : Ensure that IT control environment complies with relevant standards and regulations (such as SOX, GDPR, etc.), as well as internal policies.
• Process Improvement : Provide recommendations for enhancing the efficiency and effectiveness of IT processes and systems.
• Collaboration : Work closely with other departments to evaluate risks, systems, and controls, and implement changes as necessary.

Key Skills

• Technical Knowledge : Familiarity with IT systems, cloud infrastructure, cybersecurity and related technology.
• Audit Skills : Knowledge of audit methodologies and standards and internal control frameworks like COBIT or COSO.
• Analytical Thinking : Ability to analyze risks, identify issues, gaps and identify areas for improvement.
• Communication Skills : Strong written and verbal communication skills for managing key stakeholder relationships, reporting findings and presenting to stakeholders.
• Risk Management : Understanding of risk management principles, particularly in an IT context.
• Attention to Detail : Thoroughness in reviewing systems and identifying potential weaknesses.