Management of Information Security and Cyber Security related audit engagements and staff within RAS IT Audit division. The incumbent will work closely with the entire RAS team to:

• Plan and oversee Information Security and Cyber Security related engagements;
• Manage client and audit relationships;
• Oversight, mentoring and support to junior team members;
• Management and execution of complex engagements;
• Provide technical expertise and advice on IS and cyber-related issues and requirements;
• Take accountability for deliverables and feedback to managers and stakeholders;
• Developing and contributing to IS audit business development and go-to-market opportunities and activities.

1. Competencies

1.1 General

• Adept at queries, report writing and presenting findings using non-technical language
• Demonstrated strong project management and team management skills.
• Strong time management skills with the ability to prioritise and manage competing deadlines effectively
• Demonstrated strong problem solving and interpersonal skills
• Deadline oriented and able to prioritise own work
• Client-centric solution mindset
• Ability to work in an ambiguous environment

• 1.2 Technical Competencies and Experience
• Knowledge and working experience with ITIL, COBIT, IDEA, ACL, COS, ISAs, Nessus
• Vulnerability and firewall assessments including penetration testing
• General IT audit frameworks and processes
• Cyber and security risk assessment and advice
• Operating systems and database reviews

• 1.3 Behavioural Competencies
• Continuous learning mindset
• Curious and innovative mindset
• Excellent communication skills, both written and verbal
• Consistently delivers high quality work
• Ability to meet deadlines (reliable and dependable)
• Able to Multi-task
• Proven application of providing guidance to junior members of the project team
• Demonstrates readiness to take decisions
• Displays initiative and takes accountability for delivery of own work
• Supervises and monitors adherence to deadlines for self
• Ability to prioritize competing responsibilities as per their urgency and importance

2. Qualifying attributes

2.1 Required

• - Degree in Commerce, Accounting, Informatics, Computer Science or equivalent
• CISM, CISA
• Minimum 3 years working experience as an information security/cyber security audits
• Strong understanding of IT environments, IT security, networking and server architecture
• Strong experience in IT Audits, cyber risk assessments, vulnerability and penetration testing.

2.2 Preferred

• Qualifications Certifications or Advanced degrees in Computer Science, Information Security, and technology specific certifications
• 4+ years’ experience in providing IS audit and cyber security audit services