Develop and execute a risk-based annual audit plan covering IT, operations, and financial processes.
Lead comprehensive audits of core business areas such as project management, procurement, asset management, financial reporting, cybersecurity, and operational reliability.
Identify control gaps and process inefficiencies and recommend corrective and preventive actions.
Conduct follow-up audits to ensure implementation of agreed audit recommendations.
IT Audit & Systems Review
Evaluate IT general controls (ITGC), application controls, cybersecurity measures, and data governance practices.
Assess systems supporting essential services, including SCADA, ERP, asset management platforms, and operational technologies, ensuring security, reliability, and compliance.
Review system implementation projects and technology integrations for proper controls, accuracy, and risk mitigation.
Operations & Financial Audit
Review operational workflows related to power and energy facilities, project execution, supply chain, and maintenance activities.
Assess the adequacy and effectiveness of financial controls, accounting processes, and compliance with internal policies.
Monitor key financial transactions related to project costs, CAPEX controls, contract management, and resource utilization.
Risk Management & Compliance
Support the enterprise risk management (ERM) framework by identifying emerging risks across IT, finance, and operations.
Ensure alignment with regulatory requirements, industry standards, and internal governance policies.
Collaborate with cross-functional teams to improve process integrity, accuracy, and audit readiness.
Reporting & Stakeholder Engagement
Prepare detailed audit reports with clear, actionable recommendations for senior management and the audit committee.
Present audit findings and advise on best practices to strengthen control environments.
Qualifications
Bachelors degree in Accountancy, Finance, Information Technology, Engineering, or related field.
Professional certifications preferred (e.g., CPA, CIA, CISA, CRMA).
810 years of progressive internal audit experience, preferably within the power, energy, utilities, or infrastructure development sectors.
Strong background in IT audit, operational audit, and financial controls.
In-depth understanding of risk management frameworks, internal control standards, and regulatory requirements in essential services.
Experience auditing complex projects, capital-intensive operations, and technical environments.
Excellent analytical, communication, and report-writing skills.
Ability to lead projects, manage multiple priorities, and collaborate with various business units.