Description: Duties and Responsibilities:
• Independently and proactively plans and performs assigned audit engagements related to information technology applications, infrastructure, general controls, and Information security to ensure the confidentiality, integrity and availability of information and the reliability of existing information system controls to determine that activities comply with policies/procedures, applicable regulations, and in line with applicable standards. • Conducting ISO27001 internal audit missions to cover the company offices and sites. • Perform compliance audit to ensure that the company complies with applicable laws and regulations among different countries, in addition to the compliance with the company policies and procedures. • Providing advisory roles in all information technology and security-related fields. • Ensure successful completion of the annual IT audit plan engagements. • Prepare sound audit programs for each audit, including RCMs, to outline the planned approach for the efficient and effective conduct of the audit. Perform interviews, conduct fieldwork, and develop audit work papers to support findings and recommendations. • Write and present clear and concise reports summarizing the work performed during each engagement. • Maintain continuous communication with auditees, and Internal Audit leadership regarding the status of the engagement and with regard to findings, as they are identified. Ensure each finding is thoroughly discussed with the auditee during fieldwork, and ensure recommendations are well thought out and viable. • Performs follow-up reviews to assess and report on the status and progress of management’s action plans in response to internal audit observations and recommendations. • Assist in developing the annual IT audit plan. • Adhere to the IIA Standards for the Professional Practice of Internal Auditing in all engagements. • Build and maintain effective working relationships, and maintain a service-oriented approach in the delivery of work. • Proven ability to work effectively on multiple projects simultaneously and learn complex technical concepts. • Perform other duties and assist with projects as assigned.
Minimum Qualifications:
• Bachelor’s degree in Computer Engineering, Management Information Systems, Information Security/ Assurance, Computer Science, or a related discipline. Related professional certification - CISA or ISO 27001 is a must. • Minimum of 10-12 years’ experience in IT auditing or an IT risk & compliance role. Higher education experience is a plus. Working knowledge of security and technology frameworks (i.e., COBIT 2019). • This position requires proactive, effective communication skills and the ability to work collaboratively with all members of the Group, including frequent meetings/discussions with leadership. This position also requires the ability to write/create customized audit programs for each audit, prepare detailed work papers for all audit work performed, and the ability to write clear and concise audit reports to document the observations and related recommendations. • Moderate to advanced knowledge of Microsoft Excel, Word, and PowerPoint.
Preferred Qualifications:
• Master’s degree preferred. • Experience with audit analytics tools (e.g. ACL, IDEA) preferred. • COBIT 2019, ACDA certificates are preferred.
More