IT AUDIT SPECIALIST

JOB OBJECTIVE(S)

▪ To provide independent assurance to management on IT General Controls.
▪ Ensure best assurance practice in the plan and execution of IS Audit Programs.
▪ Ensure enterprise wide compliance of business processes and operations to internal
policies, procedures and documentations.
▪ Incorporation of standard practices, principles and processes into audit programs and
execution.
▪ Review of risk related control issues and draft appriopriate remediation plans.
▪ Understand the business environment and develop relationships with audit client in
providing value added solutions and best practices implementation.

DUTIES & RESPONSIBILITIES:

▪ Audit Review of Database Management Systems, Enterprise Network security and Device configuration, Antivirus, Systems Patches and Log Management.

▪ Audit Review of Software Development Life cycle, Project Management Implementation and Change Management Procedures.

▪ Audit Review of Data Encryption Processes, Key Management Lifecycle, and Operating Systems, physical and logical security of card holder environment.

▪ Audit Review of Active Directory, Operating Systems, Data backup and tape management.

▪ Assess systems and general IT controls and provide practical and Value added remediation plans.

▪ Prepare audit reports that summarize the most significant control weaknesses and resulting impact to the organization.

▪ Participate in multiple and simultaneous risk.

▪ Contribute to internal departmental initiatives such as trainings, departmental development initiatives and other internal projects as requested.

▪ Effectively discuss audit issues and develop business focused controls recommendations to strengthen control lapses and weaknesses based audit while maintaining departmental quality standards. Function as part of a team or work independently when requires.

Requirements

REQUIREMENT KEY PERFORMANCE INDICATORS:

▪ Timely completion of agreed audit assignments.

▪ Timely submission of reports for review and submission.

▪ Timely finalization of all departmental tasks and agreed departmental.

KPI. EDUCATION:

University: First degree(s) in Information Technology, Computer Science, or Related field.

OTHERS:

Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or related professional certifications would be an added advantage.

EXPERIENCE:

Minimum of 4 years of experience in IT Auditing or a similar role.

Understanding of the key technology and general controls around enterprise Applications and information systems.

Candidate must possess the ability to Communicate effectively audit issues and remediation plans.

KNOWLEDGE:

▪ Knowledge of Systems and General IT Controls.

▪ Analytical skills to access Operational and Compliance Requirements of Application Systems and infrastructure.

▪ Strong Data Analysis and experience with Computer Assisted Auditing Techniques.

SKILL/COMPETENCIES:

▪ Ability to multi task and manage competing priorities.

▪ Deductive reasoning abilities and eye for details.

▪ Interpersonal and Communication skills.