Internal Auditing Jobs

Internal auditing is an independent, objective assurance and consulting activity designed to add value and improve an organisation’s operations. It helps businesses achieve their objectives by systematically evaluating risk management, control, and governance processes. Unlike external auditors, who provide an opinion on financial statements; internal auditors focus on the efficiency and effectiveness of internal controls, compliance, and risk mitigation strategies.

See also for interest, audit jobs, finance jobs and legal jobs.

External auditors are independent third parties hired to provide assurance on the accuracy of financial statements. They report to shareholders and regulators. Internal auditors, on the other hand, are employees (or outsourced consultants) who work within an organisation. They report to senior management and the audit committee, and their focus extends beyond financial reporting to include operational, compliance, and risk-related audits.

Internal auditing has become vital in South Africa for four key reasons:

• governance and compliance: South Africa follows the King IV Corporate Governance principles, which emphasise effective risk and control frameworks;
• legislative requirements: public entities must comply with the PFMA (as mentioned above) and Municipal Finance Management Act 56 of 2003 (MFMA) regulations, which require strong internal controls;
• fraud prevention: with economic pressures and corruption risks, internal auditors play a key role in detecting and preventing fraud;
• risk management: organiaations rely on internal auditors to assess risks from technology, cybersecurity, and financial mismanagement.

Two notable audit failures include South Africa-listed global retailer, Steinhoff International Holdings NV, inflating its profits and assets in 2016 by R250 billion, thereby becoming the largest accounting scandal in the market to date; and South Africa's largest sugar producer Tongaat Hulett Ltd overstating its 2018 equity by R3.5 to R4.5 billion.

This YouTube clip touches on many others, shining the light on the importance of sound governance and proper accounting practices within the South African marketplace.

Most internal auditing positions have a range of educational, professional certification, and membership requirements, as detailed below.

From an educational perspective, you’ll need a bachelor’s degree in Accounting, Auditing, Finance, or Internal Auditing (BCom is the most common); and some universities, such as the University of Pretoria (UP) and UNISA, offer specialised internal auditing programmes or streams.

Then, the following professional certifications are important:

• Certified Internal Auditor (CIA) – which is globally recognised, and offered by the Institute of Internal Auditors (IIA);
• Certified Information Systems Auditor (CISA) – which is important for IT-related audit roles;
• Certification in Risk Management Assurance (CRMA) – which is aimed at risk-focused auditors.

Lastly, ensure that you sign up for a membership with IIA South Africa, which provides resources, networking, and continuous professional development for those in the internal auditing career stream.

Employers will look, ideally, for a range of key skills that include:

• analytical ability, meaning you can interpret data and identify anomalies;
• good communication, whereby you can write clear reports and explain findings to non-financial managers using uncomplicated language;
• ethics and integrity, whereby you maintain your independence and objectivity, no matter where the cards fall;
• enviable IT knowledge, such that you show familiarity with ERP systems, data analytics tools, and cybersecurity;
• crucial problem-solving ability, such that you can recommend practical solutions to improve organisational processes.

See some further reading from LCT International, here.

A typical day may include:

• reviewing financial and operational data;
• conducting interviews with staff to understand processes, and brainstorming ways to better these;
• testing internal controls;
• writing audit reports and presenting findings to management;
• following up on previous recommendations;
• using data analytics to identify trends and anomalies.

This clip from the Institute of Internal Auditors shares tips on how to succeed in the role.

Certainly not. Internal auditors work across the full calibre of:

• private sector companies – such as banks (e.g. FNB), insurance companies (e.g. Momentum), manufacturing firms (e.g. Unilever), and FMCG companies (e.g. Nestle);
• the public sector, such as government departments (e.g. the Department of Health), municipalities (e.g. Cape Town Metropolitan Municipality), and state-owned enterprises (SOEs) (e.g. Transnet);
• professional services firms (e.g. McKinsey), many of whom outsource their internal audit functions to consulting firms;
• non-profit organisations (e.g. Amy Foundation Trust and NGOs (e.g. Khulisa Social Solutions, particularly those that manage donor funds.

Your career progression will typically look as follows:

• an internal audit clerk or trainee, an entry-level position for recent graduates;
• an internal auditor or junior auditor, who is tasked with assisting with audits, and performing fieldwork;
• a senior internal auditor, who leads audit projects, and manages junior staff members;
• an audit supervisor or internal audit manager, who generally oversees the internal audit function for a business division;
• chief audit executive (CAE), the pinnacle of the profession, who is tasked with heading up an internal audit team, and reporting back to the company’s audit committee.

Here's a YouTube clip from content creator Rorisang Mabogoane, on how to become an internal auditor.

Salaries vary based on experience, industry, and location, however an entry-level internal auditor with up to two years of experience can generally earn R220 000 to R350 000 per year, which translates to between R18 333 to R29 166 on a monthly basis.

On the next rung up, the mid-level with three to five years of experience, salaries are generally in the R450 000 to R650 000 range per annum, or R37 500 to R54 166 per month.

Senior internal auditors earn typically between R650 000 to R850 000 per year (R54 166 to R70 822 on a monthly basis); and internal audit managers between R850 000 and R1.2 million (R70 833 to R100 000 on a monthly basis).

The pinnacle role is that of a chief audit executive, who earns R1.5 million per annum (or R125 000 per month), excluding perks and bonuses. Not that roles offered in at financial services firms, and Johannesburg-based roles, generally pay the highest salaries.

Yes. Internal auditors are listed as having scarce skills in South Africa. Demand is being driven by:

• increased regulatory compliance;
• the need for robust risk management;
• digital transformation, requiring talented auditors with expertise in IT and data analytics.

Government entities and SOEs tend to advertise numerous internal auditing positions, due to PFMA compliance requirements.

Besides internal auditors, South Africa faces shortages in several other key areas. IT professionals, particularly in software development, cyber security and data science are in high demand. Engineering professionals, including civil, electrical, mechanical, and mining engineers are also scarce in the country.

Healthcare workers like doctors, nurses, and pharmacists are in short supply too, and there is a need for teachers specialising in STEM subjects – as well as skilled tradespeople such as electricians, fitters, turners, and boilermakers. Financial analysts and accountants are also in high demand.

Read more about scarce skills in south Africa, in this article from Varsity College.

Gain your CIA designation by firstly completing a bachelor’s degree in accounting or auditing. Next up, gain at least years of internal auditing or related work experience; and register to write the CIA Exam – which contains three parts i.e. essentials, practice, and business knowledge.

For local support, be sure to sign up as a member of IIA South Africa, which costs around R18 000 (US$1 000 in exam fees, and includes the study materials you will require. The importance of doing this is that you will then enjoy global recognition and better long-term earning potential.

The 12th African Federation of Institutes of Internal Auditors (AFIIA) Conference, which will take place from 25 to 26 May 2026 at the Cape Town International Convention Centre (CTICC), is said to be the premier internal audit event in Africa. Don’t miss it!

Running over 2-and-a-half days, the conference will feature a diverse lineup of plenary sessions, and specialised tracks led by prominent speakers in the internal auditing profession. Attendees will gain valuable insights into best practices in internal auditing, emerging industry trends, and a variety of business and personal development topics. Importantly, the primary goal of the event is to facilitate dialogue among internal auditors and stakeholders, fostering collaboration towards common goals and challenges faced within the continent’s public and private sectors.

Alternatively, have a look at the IIASA’s Community Calendar, for smaller more localised events taking place around the country.

Internal auditing is unlikely to become obsolete, but the role is certainly changing. Trends coming to the forefront on the profession include:

• use of data analytics and automation: internal auditors will begin using advanced analytics for continuous auditing, if they are not doing so already;
• cybersecurity audits: there will be a growing demand for auditors with advanced IT skills and levels of expertise in various of the popular software programmes designed for the profession;
• ESG auditing: companies are now being audited for environmental, social, and governance compliance, which will be a growing area in the run up to the United Nation’s 2030 Sustainable Development Goals (SDGs), and beyond;
• advisory roles: internal auditors are likely to act on an increasing basis as business advisors, not just compliance checkers.

Read more about the industry’s future trends to watch, in this article from TaxTMI.

You are advised to look for vacancies on independent job portals, the IIASA’s vacancies list, and to sign up with bricks and mortar recruitment agencies that specialise in finance roles – such as Michael Page, Robert Walters Africa, Network Recruitment, Hire Resolve, CA Financial Appointments, and FROGG Recruitment. These agencies focus on connecting finance professionals with suitable roles across a wide range of levels and specialisations.

Yes, preparing cutting-edge answers to the following three questions will showcase to a prospective employer your integrity, strong communication skills, and knowledge of modern auditing tools:

• “Describe the steps you would take to conduct an internal audit”;
• “How would you set about handling resistance from a department, during the carrying out on an internal audit?”;
• “Give an example of how you identified and resolved a control weakness during an internal audit.”

Here are six some short courses you can do in South Africa, to help strengthen your internal auditing skills:

1. Institute of Internal Auditors South Africa (IIASA) short courses, which are designed for internal auditors at all levels. Popular options, which take from one to three days, include: Introduction to Internal Auditing (for beginners); Risk-Based Internal Auditing; Auditing IT and Cybersecurity Controls; and Fraud Risk Management and Detection. These short courses are useful because they align with international standards (IPPF), and are great for the purposes of professional development and certification (e.g. CIA prep, as referred to above).
2. University short learning programmes, such as in auditing and risk management, which are offered by many South African universities. With a duration of from one to five days, the University of Johannesburg (UJ) provides short courses in Practical Internal Auditing; and Corporate Governance and Ethics; while the University of Pretoria (UP) offers up those in Internal Audit Professionalism, and Forensic and Investigative Auditing. Make sure that you sign up for an online on in-contact courses, depending on your preference, and then sit back and enjoy the university-backed certification that will add credibility to your CV.
3. Consider a professional accounting body risk or audit course, such as those presented either in in an online or hybrid fashion by CIMA or ACCA. Modules include Internal Audit and Risk Management, and you’ll find them useful as they’ll give you a greater understanding of aspects of your profession that include governance, compliance, and financial risk.
4. For those keen to upskill in interesting subjects such as fraud-related red flags, data analytics for fraud detection, and interviewing/investigation skills, take on a one to three day Forensic Audit and Fraud Detection short course. This is generally provided by SAICA-accredited professional training firms, such as Deloitte Academy, and BDO Training.
5. Popular courses offered by the IIA SA, ISACA South Africa Chapter, and other private academies, include the likes of IT General Controls Auditing, and the Introduction to Cybersecurity for Auditors. These cybersecurity and IT audit basics have become critical in internal auditing, as the work has become increasing tech in nature.
6. A last short-course training option is that focused on IFRS and compliance, to help you remain up to date on changes in regulations and reporting standards. Providers include SAICA, W. Consulting, the SA Accounting Authority, and Milpark Education, and you are sure to find the training useful because internal auditors need to understand compliance frameworks to assess control adequacy within an organisation.

Consider making an investment in your career, by purchasing the following five books for your nightstand:

• Empire Builder (2023) by Adam Coffey – with a blurb that reads “You've got big dreams for your business, but the odds are not in your favour. You're struggling to scale. Sometimes it's hard to stay profitable. You know you need expert advice to grow.”;
• Internal Controls Toolkit (2019) by Christine H Doxey – which includes detailed information on controls and risks outlined for key business processes. The book offers background information on the history of internal controls, recommendations for developing a series of risk-based controls, proven ideas for implementing internal controls, and showcases the metrics to use when measuring results. Doxey explores how to establish the three most critical corporate controls: segregation of duties; systems access; and delegation of authority. Filled with best practices for each step in the internal control process, the book examines the COSO model at the heart of many internal controls systems and Sarbanes-Oxley efforts in the corporate environment;
• Think In Systems: The Art of Strategic Planning, Effective Problem Solving, And Lasting Results (2019) by Zoe McKey – which encourages readers to “get out of that rut. Find long-term solution to your problems”. We often have the best of intentions to improve our lives, she writes, but our solutions tend to fall short of actually doing so. The author believes that our best efforts can result in the opposite of what we want over time, or feed the very problems we want to fix. How to avoid this trap? She says she will reveal all in this book…;
• Auditing: A Complete Guide to Perform Internal and External Audits (2020) by Tim Power – a tome that acknowledges that “auditing can be a scary concept to people studying accounting and finance, but it doesn't have to be. Many people are scared by the idea of having to make sure that somebody else is doing things correctly, especially in such a high-pressure environment as the tumultuous world of business. What can help you, though, is having someone clearly and concisely explain everything you need to know about the topic. That's what this book aims to do;
• Trusted Advisors: Key Attributes of Outstanding Internal Auditors (2017) by Richard F Chamber – in which the author shares top attributes needed to excel as an internal audit professional, and to be viewed as the go-to person within a corporate entity. Surveying nearly 300 chief audit executives (CAEs) globally and interviewing some of these people individually, Chambers gathered data confirming his personal viewpoint of what it takes to become a successful internal auditor. Whether your career is just launching, or you’re a veteran in your field, the guidance gleaned from the collective experiences shared in this book will propel you into the next phase of your chosen profession.

Internal auditing is a dynamic and rewarding career in South Africa, offering excellent job security, attractive salaries, and global opportunities through certifications such as the CIA. However, it certainly helps to have a strong affinity for numbers and organised systems – as these attributes will enhance your efficacy in a job, and the satisfaction your gain from doing this kind of work.

It also helps to have a strong understanding of the vital role of risk management in your profession, because working in a systematic way will help you to identify potential risks, assess their impact, and develop mitigation strategies; your boss will also love you for the way in which his company is able to sidestep unfortunate accounting irregularities.

Being meticulous and organised will build trust with the company board and its stakeholders, and your reports will be looked on as credible when they demonstrate a clear understanding of the systems and processes you have been evaluating.

Remember that as organisations are required to place greater emphasis on governance, compliance, and risk management, the demand for skilled internal auditors will continue to grow. If you enjoy analysis, problem-solving, and working at the heart of a company’s decision-making engine, internal auditing is likely to be your ideal career path.