Role overview
What you'll be stepping into
The Senior IT Auditor will report to the Audit Manager IT and will be based at Head office. The senior IT Auditor will provide assurance audits on the risk, governance and control of the Bank’s Information Systems to ensure confidentiality, integrity and availability of the Bank’s Information Systems & Infrastructure. He/ she will also be responsible for the identification of IT control gaps to mitigate frauds and loss of revenue.
Specific responsibilities include:
Identify business objectives, understand risk inherent in activities to be audited and develop audit plans in assigned audit engagements.
Perform field work and prepare quality working papers in compliance with audit standards and policy.
Provide input in developing appropriate audit tests aimed at addressing identified IT risks and achieving the desired audit objectives to provide assurance that IT risks are effectively managed or mitigated.
Conduct all assigned audits end-to-end; including planning, evaluating and documenting the results, reporting and follow up in accordance with the annual audit plan.
Prepare clear and concise audit reports on audit findings, detected non-compliance with bank policies, guidelines, statutory requirements and procedures for discussion with the line manager, before final reports are issued to Management for corrective action.
Providing input to the annual IT audit plan/strategy to be included in the overall departmental Risk Based Annual Audit Plan.
Provide first level assurance services on all key levels of system development life cycle and acquisition process on all Information Technology System and modules being integrated into the Bank’s IT environment.
Academic qualifications, Experience & competence: –
Bachelor’s Degree in Information Technology, software engineering, computer science
Full Professional qualification in CISA/CISM/CRISC
3 years’ experience in IT audits
Knowledge of COBIT,ISO 27001,ITIL
Professional member of ISACA
Knowledge of vendor risk management, and regulatory compliance audits.
Knowledge in data analytics and IT governance.
The ability to communicate clearly in a professional manner is deemed essential.
Ability to build functioning working relationships across organizational, corporate, and cultural boundaries.
Ability to demonstrate positive image and uphold Bank values.
Must be a person of integrity.
Forensic Knowledge
How to apply