Audit Planning and Execution:
- Plan and execute IT audit engagements, including scoping, risk assessment, and resource allocation.
- Develop risk-based audit programs and testing procedures to assess the effectiveness of IT controls.
- Conduct interviews with stakeholders to understand business processes and IT systems.
Risk Assessment and Analysis:
- Identify key risks related to IT applications and systems, cloud, network and data security, IT processes, and compliance.
- Evaluate controls and processes to mitigate identified risks.
- Analyze findings and recommend corrective actions to address control deficiencies.
Team Leadership and Collaboration:
- Collaborate with peers and contract staff.
- Provide guidance, mentorship, and technical expertise to team members.
- Foster a collaborative and supportive work environment.
Reporting and Communication:
- Prepare clear and concise audit reports documenting findings, recommendations, and management responses.
- Communicate audit results and recommendations to stakeholders, including senior management and audit committees.
- Track and follow up on the implementation of audit recommendations.
QUALIFICATIONS:
- Bachelor's degree in Accounting, Internal Audit or related field.
- 5-10 years of experience in IT audit with demonstrated progression in responsibilities.
- Professional certifications (CISA, CISSP, CIA, etc.) and technology certifications, preferred.
- BPO experience, preferred.
- Exposure to advanced technology such as ML and AI.
- Excellent spoken communication skills, with the ability to effectively interact with stakeholders at all levels of the organization.
- Excellent written communication skills, with the ability to effectively articulate control objectives, risks, root causes, potential impact, and recommendations; prepare draft risk assessments, periodic audit updates and audit reports.
- Strong understanding of IT governance frameworks, control frameworks, and regulatory requirements.
- Experience with audit tools and techniques, such as data analytics, IT security assessments, and vulnerability scanning preferred.
- Attention to detail and analytical mindset, with the ability to understand complex IT systems and processes, identify and assess complex IT risks and controls.
- Ability to work with cross functional teams, foster open communication, and share knowledge.
