Job Description
Job Purpose
- To provide independent assurance to management on IT General Controls.
- Ensure best assurance practice in the plan and execution of IS Audit Programs.
- Ensure enterprise wide compliance of business processes and operations to internal policies, procedures and documentations.
- Incorporation of standard practices, principles and processes into audit programs and execution.
- Review of risk related control issues and draft appriopriate remediation plans.
- Understand the business environment and develop relationships with audit client in providing value added solutions and best practices implementation.
Duties & Responsibilities
- Audit Review of Database Management Systems, Enterprise Network security and Device configuration, Antivirus, Systems Patches and Log Management.
- Audit Review of Software Development Life cycle, Project Management Implementation and Change Management Procedures.
- Audit Review of Data Encryption Processes, Key Management Lifecycle, and Operating Systems, physical and logical security of card holder environment.
- Audit Review of Active Directory, Operating Systems, Data backup and tape management.
- Assess systems and general IT controls and provide practical and Value-added remediation plans.
- Prepare audit reports that summarize the most significant control weaknesses and resulting impact to the organization.
- Participate in multiple and simultaneous risk
- Contribute to internal departmental initiatives such as training, departmental development initiatives and other internal projects as requested.
- Effectively discuss audit issues and develop business focused controls recommendations to strengthen control lapses and weaknesses-based audit while maintaining departmental quality standards. Function as part of a team or work independently when requires.
Requirements
Education:
- University: First Degree(s) in Information Technology, Computer Science, or Related field.
- Others: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or related professional certifications would be an added advantage.
- Experience: Minimum of 10 years’ experience in IT Auditing or a similar role.
- Understanding of the key technology and general controls around enterprise
- Applications and information systems. Candidates must possess the ability to
- Communicate effectively audit issues and remediation plans.
Knowledge:
- Knowledge of Systems and General IT Controls.
- Analytical skills to access Operational and Compliance Requirements of Application Systems and infrastructure.
- Strong Data Analysis and experience with Computer Assisted Auditing Techniques.
Skill / Competencies:
- Ability to multitask and manage competing priorities.
- Deductive reasoning abilities and eye for details.
- Interpersonal and Communication skills.