IT Auditor

Duties and Responsibilities

1. Administration
a) Assists in the preparation of the IT Audit Section budget and its management for efficient utilization.
b) Assists in the development of an IT Audit Annual Programme to guide sectional operations.
c) Assists in the development and maintenance of IT auditing Standard Operating Procedures.
d) Assists in the development of the IT section audit training program.

2. Assessing the Company’s exposure to risks
a) Examines whether the Company’s Information System is adequately designed for data confidentiality, integrity and security.
b) Assess cybersecurity risks and check if adequate mitigatory controls are in place.
c) Reviews adherence to IT policies, procedures and regulatory requirements.
d) Analyses systems to improve efficiency and quality of output.
e) ICT risk identification and ensuring adequate control measures are in place to mitigate the risks.
f) Assesses ICT Systems to ensure they support and enable the Company to achieve its objectives and goals.
i) g) Appraises the adequacy of ICT systems and capacity for future expansion in line with corporate strategy.
h) Leads engagements as assigned, monitoring either internal or co-sourced teams in the performance of normal or special request audit assignments. Evaluate the Company’s IT service level to stakeholders and assist management to ensure adequate and efficient services is always provided.

3. Reporting
a) Prepares exception reports alerting Management and/or Board of imminent risk and measures to manage it.
b) Discusses and agrees with Management on the corrective action plans and timelines to address identified IT risks.
c) Monitoring and Evaluation of corrective actions to ensure timeous implementation