IT Audit Manager

Job Description

IT Audit Manager is responsible for leading and executing IT audits to assess IT Governance and effectiveness of information technology controls in operations across the Group. This role works independently or as part of a team to conduct audits of an organization's IT infrastructure, applications, and systems to ensure compliance with regulatory requirements, industry standards, and best practices.

Responsibilities:

• Assist the Group Chief Audit Officer in developing risk-based IT audit plans that align with organizational objectives and goals.
• Ensure that the audit program under the audit cycle stated in the Annual Audit Plan is properly executed to provide reasonable assurance on achievement of overall company objectives. This includes developing audit programs, testing controls, and documenting results.
• Plan and conduct rigorous audits of IT systems and processes to identify risks, security issues, and areas for improvement. This includes applications, databases, networks, operating systems, and information security controls.
• Perform general and application control reviews of information systems.
• Review IT policies, procedures, change and configuration management processes.
• Develop recommendations to strengthen controls and improve IT governance.
• Assist the audit team in data extraction from ERP systems, data mining and data analytics using excel or audit analytical tools such as ACL/Arbutus for all non-IT audit engagements (adhoc reviews, investigations etc.)
• Demonstrate working knowledge of Artificial Intelligence (AI) tools for delivering efficient and effective results in the best interest of the department and the organization.
• Perform IT security audits to assess risks related to cyberthreats, data leakage, unauthorized access, and other information security concerns. Test security controls and make recommendations for improvement.
• Demonstrate effective time management skills by ensuring completion of audit engagements within agreed time budgets, keeping the Internal Audit Manager & IT Audit Manager informed of progress for project time extension, if any granted.
• Deliver audit reports that clearly communicate audit findings, impact, recommendations, and management responses. This includes presenting audit findings to management and other stakeholders, and tracking remediation of issues.
• Collaborate with internal team members. Serve as an IT subject matter expert to educate non-technical business partners and stakeholders.
• Remain up to date on emerging IT risks and controls, including modern technologies and best practices. This includes attending training, conferences, and other professional development opportunities.
• Assist the leadership team in achieving Department's annual objectives/KPls.
• Perform Ad-hoc assignments as per Group Chief Audit Officer's directions.

Desired Experience:

• Graduate or Postgraduate in IT, from a recognized institution.
• CISA qualified.
• Minimum 10 years of experience in an IT Audit function of a similar multidivisional group or an MNC.
• Trained with Big Four Audit/Consulting Firms.
• Proficiency in utilizing Data Analytics and Business Intelligence tools and the ability to fully leverage their capabilities.
• Working experience of IT Governance and IT Infrastructure.
• Working knowledge of well reputed ERPs similar to Oracle.
• Working knowledge of the IPPF standards, ISO 27000 series and COBIT.