Assistant Manager , IT Internal Audit

• Conduct technology-focused audits independently end-to-end
• Review critical systems and processes to identify risks
• Benchmark existing systems controls and processes with industry best practices
• Conduct key control testing as per Sarbanes-Oxley (SOX) requirements
• Maintain audit documentation as per established processes
• Support external audit testing requirements as needed

WHAT ABOUT YOU

Education: Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.

Certifications: Certifications like CISA (Certified Information Systems Auditor) is a must. Additional certifications like CISM, CISSP, CRISC or CIA may be preferred.

Experience: 4 to 6 years of experience in IT audit, internal audit, or a related role.

Additional Information

Key Responsibilities:

• Internal Audits: Plan, execute, and lead IT audits, including infrastructure, applications, information security and systems development audits.
• Risk Assessment: Identify and evaluate IT-related risks across different areas of the business and recommend improvements to mitigate these risks.
• Audit Reporting: Prepare audit findings, and present audit reports and recommendations to IT management regarding control weaknesses and areas of improvement.
• Compliance: Ensure that IT control environment complies with relevant standards and regulations (such as SOX, GDPR, etc), as well as internal policies.
• Process Improvement: Provide recommendations for enhancing the efficiency and effectiveness of IT processes and systems.
• Collaboration: Work closely with other departments to evaluate risks, systems, and controls, and implement changes as necessary.

Key Skills:

• Technical Knowledge: Familiarity with IT systems, cloud infrastructure, cybersecurity and related technology.
• Audit Skills: Knowledge of audit methodologies and standards and internal control frameworks like COBIT or COSO.
• Analytical Thinking: Ability to analyze risks, identify issues, gaps and identify areas for improvement.
• Communication Skills: Strong written and verbal communication skills for managing key stakeholder relationships, reporting findings and presenting to stakeholders.
• Risk Management: Understanding of risk management principles, particularly in an IT context.
• Attention to Detail: Thoroughness in reviewing systems and identifying potential weaknesses.