Objective: Responsible for evaluating the design, implementation, and operating effectiveness of the organizations IT controls, ensuring the security, integrity, and availability of information systems.
Key Responsibilities
- Audit Planning & Execution: Develop and execute risk-based audit programs for IT infrastructure, applications, and processes (e.g., ITGCs, Application Controls, Cybersecurity). Conduct testing on logical access, change management, data backup/recovery, BCP, and network security.
- Risk & Compliance Assessment: Assess IT General Controls (ITGCs) across various platforms (operating systems, databases, network devices).
- Reporting & Follow-up: Prepare explicit and concise audit reports detailing findings and risks. Effectively communicate technical issues to stakeholders and track the timely remediation of identified gaps.
- Advisory & Improvement:
Provide guidance to IT and business teams on designing internal controls for new systems, and stay updated on emerging technologies.
Qualifications & Skills
- Education: BE (Bachelor of Engineering/Technology) degree OR CISA (Certified Information Systems Auditor) certification.
Technical Skills Required
- IT Audit Methodology: Understanding of audit standards, principles, and a risk-based approach to Information Systems (IS) auditing.
- Cybersecurity: Familiarity with information security principles, vulnerability management, penetration testing concepts, and standard security tools.
- Data Analysis: Proficiency with audit tools or advanced data analysis techniques.
- Control Frameworks: Working knowledge of IT governance and control frameworks