Senior Manager IT Audit

Senior Manager IT Audit

Job summary statement/purpose:

The Senior Manager: IT Audit will lead, manage, and drive IT Audit initiatives including the development of the IT Audit Methodologies, IT Audit Plan and ensure execution of the plan and any ad hoc engagements. The Senior Manager will be responsible for ensuring the development of the IT Audit team through training and coaching of staff. Drive changes that will assist in increasing efficiencies and ensure optimal coverage on IT Governance, Risk and Controls. Day to day operational and performance management of the internal audit department mainly focusing on IT audit related aspects.

Qualifications and Experience

• Relevant degree in Computer Science, Information Technology, Comp Accounting, Auditing or Computer Science equivalent.
• Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP).
• Certification as a CISA, CISM, or any related certification.
• Relevant Postgraduate qualification
• At least 8 years relevant practical experience in IT audit/ consulting, IT operations, IT risk management, (all or a combination).
• At least 5 years management experience
• Project/ Programme assurance and post implementation reviews experience.
• Experience in conducting security reviews.
• Relevant IT experience within Financial Services
• Knowledge of IT governance frameworks, practices, and practical implementation.
• (COBIT, ITIL, NIST, ISO27001) and Project Management Frameworks (e.g., Prince 2, Agile, PMBOK).
• Knowledge of management information systems terminology, concepts, and practices.
• Knowledge of Auditing Standards.
• Knowledge of governance and risk management.
• General business acumen.

KEY PERFORMANCE AREAS (DUTIES & RESPONSIBILITIES):

1. Strategic Alignment

• Provide input into the development of Internal Audit annual strategic plan and KPIs.
• Development of the IT Audit Plan and ensure overall alignment with the internal audit strategic plan and annual audit plan.

2. Policy and procedure development

• Provide input into the development of Internal Audit annual strategic plan and KPIs.
• Provides input on the improvement of the annual plan, with a focus on IT audit plan.
• Provides annual input on the improvement of the internal audit charter.
• Research and benchmark IT audit approach and methodology with the view to improve and alignment with the relevant standards.
• Continuously review and revise the IT audit methodology, with a view to improve efficiencies in performing reviews.
• Keep abreast with the IT and audit developments, to ensure continuous improvement in internal processes and deliver value-adding engagements to the organisation.
• Manage and support the internal audit function’s quality assurance and improvement program.
• Ensure Internal Audit Risk Management matters are adequately managed and comply with Company Risk Management Policies.

3. Audit Operations Management

• Identify and evaluate the Company’s risk areas and provides key input to the development of the annual audit plan focusing on IT Audits.
• Lead audit teams or Perform complex IT audits and system review including the following:
• IT General and Application control reviews (internal and third parties)
• Infrastructure reviews
• Project assurance reviews
• System post-implementation reviews
• Cyber and Security Reviews
• Data Analytics
• Drive the execution of the IT engagements in line with the approved Internal Audit Plan.
• Perform resource planning on projects and ensure appropriate mix in terms of experience and ensure efficient delivery on planned engagements.
• Lead, provide oversight and manage execution of IT audit and consulting engagements across all phases of the engagements (i.e. planning; fieldwork and reporting), in line with the project plan, and ensure work is performed in line with the standards and methodology.
• Communicate the results of audit and consulting projects via written reports and oral presentations to management and audit committee.
• Provides input into or preparation of various Internal Audit reports for review prior to submission to the various governance structures in the organization (e.g. subcommittees, executive committees, board committees).

4. Stakeholder Management

• Develop and maintain strategic relationships with key internal stakeholders (Sasria Management) and external (Agent company Management) to ensure stakeholder expectations are met.
• Identify opportunities, to provide consulting services to key stakeholders.
• Develop and maintain relationships with other assurance providers and ensure:
• Effective integrated audits
• Combined assurance
• Manage external consultants in the performance of ad hoc specialised engagements, on a need basis.
• Represents internal audit (If and when required) on:
• Company project teams.
• Internal company staff committee meetings (e.g. Operations Committee, Steering committees, Exco Sub-committees, Audit Committee).
• Company management meetings.

5. Financial/Operational budget

• Assists in the development of the operational budget for:
• Travelling budget.
• Specific audit projects’ budgets, including consulting services where required for specialised engagements.
• Participate in the procurement process for sourcing consulting services on specialised IT engagements.
• Monitor and report on performance against projects and operational budget.

6. People Management

• Identify resourcing needs and participate in the recruitment of staff.
• Ensure that annual performance objectives are set and understood by staff.
• Ensure that all staff are trained, skilled and that their expertise is fully applied and provide assistance in training, coaching, and guidance.
• Drive talent development and succession initiatives, including providing constructive and value add input into the staff ‘s personal development to their full potential.
• Manage performance of staff in line with People Management policies and procedures.
• Motivate, train and coach staff to ensure a good working environment and maximum productivity.
• Drive own performance development plan and career development plan.
• Pursues professional development opportunities, including external and internal training and professional association memberships, and shares information gained with co-workers and subordinates
• Perform any reasonable ad hoc tasks as and when required.