About the position
Our client is a dynamic and forward-thinking organisation dedicated to operational excellence and robust governance across its diverse business units. They are committed to leveraging cutting-edge technology, including data analytics and artificial intelligence, to drive best-in-class internal audit practices. This is an office-based role within a supportive and collaborative environment focused on continuous improvement and professional development.
Duties & Responsibilities
Are you a seasoned IT Audit professional with a passion for leveraging data analytics and cyber security expertise to drive impactful assurance engagements? Join our client's leading internal audit team as a Senior IT Audit & Assurance Specialist. This role offers a unique opportunity to shape and deliver IT, data analytics, and cyber security reviews across various entities within the division. You will play a pivotal role in enhancing audit methodologies, collaborating with cross-functional teams to provide IT guidance, and championing innovative approaches like ALICE. If you thrive in an environment that values innovation, continuous learning, and making a tangible difference, this is the role for you.
Responsibilities:
- Provide expert IT, data analytics, and cyber security knowledge to the Internal Audit team.
- Lead and execute IT General Controls (ITGC), application, and cyber security reviews across diverse business clusters.
- Collaborate with colleagues to offer IT guidance and support for non-IT audit engagements.
- Assist team members with data sourcing, analytics development, and interpretation to enable data-driven insights.
- Promote and guide the adoption of ALICE across the division, supporting the interpretation of results and recommendations for findings.
- Plan, scope, and conduct IT audits for areas not covered by ALICE, including projects, Business Continuity Plans (BCP), Disaster Recovery Plans (DRP), ITGC, cyber reviews, and application controls.
- Represent Internal Audit on IT steering committees for new system implementations as required.
- Contribute to the annual IT Audit planning process in collaboration with Divisional CIOs and IT Teams.
- Effectively manage time across concurrent projects and divisional initiatives, providing mentorship to junior staff.
- Drive innovation and invest in skill development to create cost-effective data analytics solutions.
- Enhance the quality of assurance engagements by identifying risks, performing testing, researching regulations, and developing comprehensive reports.
- Utilize industry-leading frameworks and tools to analyze documentation, identify risks, and ensure control assurance.
- Test the validity of historical financial and non-financial information, applying relevant standards where appropriate.
- Develop timely assurance reports that accurately present risks, related controls, and their effectiveness.
- Ensure findings and recommendations align with audit objectives by considering the business context during technical assessments.
Desired Experience & Qualification
Must-Haves:
- Degree or Diploma in a relevant field.
- Relevant industry-specific certification (e.g., CISA, CISM).
- Minimum of 5 years of working experience in a client-facing role.
- Solid grasp of technical skills and audit methodologies.
- Demonstrated knowledge and technical skills on core operating systems (e.g., Windows, UNIX) and the ability to identify risks related to in-house developed systems.
- Proven experience in performing business process and automated controls testing on common applications.
- ERP security and technical knowledge (e.g., SAP, Dynamics 365) including financial accounting (FI) modules.
- Strong understanding of linking risks and controls; problem-solving and logic capabilities to research unfamiliar systems.
- Business report writing skills, with the ability to translate technical concepts to non-IT audiences.
- Ability to work efficiently and meet deadlines consistently.
- Demonstrates initiative, confidence, and accountability for project delivery.
- Proactive attitude and active participation in service delivery.
- Deadline and quality-driven self-starter.
- Ability to work effectively within a team and with client management, as well as individually.
- Strong analytical skillset.
- Good communication and collaboration skills.
Nice-to-Haves:
- Experience in a client-facing role with a focus on large-scale information technology application systems, infrastructure, business processes, and security standards.
- Demonstrated understanding of the IT audit methodology and its application in various client industries.
- Experience with Power BI or other data analytic tools.
- Ability to work with and document workflows (e.g., Visio).
- Programming skills.
- Familiarity with technology and data management frameworks (e.g., Technology Risk, Data Risk, Cyber Risk Maturity Model) through independent research and training.
- Knowledge of technology and data risk, industry-specific regulations, and emerging trends.
- Experience with major program management approaches and practices (e.g., COSO, ITIL, COBIT, NIST, CIS, COBIT for SOX).
- Developing digital fluency and knowledge on emerging technologies, including Cloud, RPA, AI.
Desired Skills:
Desired Work Experience:
Desired Qualification Level:
