IT Audit Manager

Key Purpose

• The successful candidate will be responsible for completing audits inside Discovery and providing feedback on the outcome. The successful candidate must have a drive, sense of urgency and work flexibility.

Areas of responsibility may include but not limited to

• Scheduling and planning of audits, assignment of staff and review resource requirements.

• Defining the purpose, scope and audit approach of each audit for assigned areas of audit coverage.

• Agree audit scope with client and provide final engagement letter to Senior IT Audit Manager for approval and distribution.

• Ensuring that all risks are addressed for the specific audit engagements.

• Provide feedback to Senior IT Audit Manager on the planning, execution and reporting of the audits.

• Review and sign-off of planning, working papers and reports, and where required raise review notes for the work performed by Senior IT Auditors / IT Auditors (pertaining to Engagement Letters, Audit Planning Memos ("APMs"), system descriptions, walkthroughs, process flow diagrams, Risk and Control Matrix ("RACM"), test procedures, working papers, reports and action plans).

• Address review notes raised by the Senior IT Audit Manager.

• Monitoring of the quality of work performed by the audit team and taking corrective action (where applicable).

• Provide training and supervision to audit team in order to ensure that that the required audit objectives are met and that adequate practical coverage is achieved.

• Assist Senior IT Audit Manager in developing the Audit Universe, Annual Internal Audit Plan, and the Three Year Rolling Plan.

• Monitor progress of audits against plan.

• Track progress /changes in business risks and align audit plan.

• Request feedback from management.

• Escalate cases where feedback is not received.

• Ultimately responsible for quality of audit files (Pentana or other).

• Proactively take on additional tasks as requested by Senior IT Audit Manager.

• Provide meaningful input and monitor the effective and timely implementation of management actions to address any control weaknesses identified through risk profiling, risk events and control self- assessment.

• Conduct a Quality Assurance review of audit files and finalise once comfortable.

• External audit – develop and manage the relationship with external audit as it pertains to the reliance on IT Audit work, data requirements and co-ordination of resources to deliver specific assurance for external audit.

• Drafting and reviewing of engagement letters and final reports for Senior Management review.

• Review of draft observations and forwarding these to business for comment.

Reporting to

• Audit Committees

• Business Risk Committees

• Company Excos

• Management (detailed audit reports)

• CAE (where applicable)

• Preparation and submission of Risk and Audit committee reports / packs.

• Attending Audit Committees, Risk Committee and Steering Committee meetings, as and when required.

• Assist in periodic reporting on the status and results of the annual audit plan and the sufficiency of department resources.

• Perform Peer Quality Review Assessments.

• Ad-hoc reporting.

Education and Experience

• B Degree or equivalent (and relevant) qualification. (Honours / Masters (with Computer Science / Computer Auditing / Information Systems / Auditing as majors)

• CISA (is required)

• CIA / ACCA / CIMA / CFSA / CPA / CIA / CISM / CRISC / CGIT / CCSA (one or more of the afore mentioned is preferable)

• Experience in conducting financial, operational or IT audits.

• Reporting to Audit and/or Risk Committees.

Essential knowledge

• Internal Controls

• Risk management framework (COSO)

• IT General Control reviews

• Application Control reviews

• Internal controls

• Corporate and IT governance

• IT Infrastructure technical knowledge (reviewing of databases and operating systems)

• Cyber security

• Corporate governance principles

• Computer literacy

Personal Attributes

• Upholds ethics and values and demonstrates integrity

• Takes initiative and works under own direction with the ability to make quick, clear choices which may include tough choices or considered risks

• Shows respect for the views and contributions of others.

• Strong negotiating and influencing skills.

• Excellent communication skills. The candidate should speak fluently, have the ability to write in a well-structured and logical manner.

• Demonstrates an understanding of different organisational departments and functions.