Senior IT Auditor

Job Posting Salary: R771,969.00

Job Posting End Date: 27 Oct 2026

Key Performance Areas

Plan the Implementation of Specific Audits

• Plan and conduct audits as per the approved Internal Audit Methodology.
• Conduct preliminary survey to understand the area to be audited.
• Document and complete the planning documents system description and risk and control gap analysis with the auditee opening meeting for confirmation and indication of changes that need to be effected.
• Discuss the planning documents with the auditee after the opening meeting for confirmation of changes that need to be effected.
• Formulate the audit program based on the outcome of the preliminary survey using appropriate audit methodologies.

Supervise the Audit Process

• Allocate audit work to auditors as per RACM and manage hours for the audit team.
• Provide regular team progress to the IT Audit Manager.
• Conduct and supervise the audit as per the RACM.
• Review working papers for completeness and accuracy before submission to the IT Audit Manager.
• Review the system descriptions and risk and control gap analysis performed by the internal auditors.

Policy Review and Implementation

• Contribute to the development and implementation of departmental policy, procedures and processes.
• Keep up to date with effective policy and practice execution strategies.

Reporting

• Prepare and submit draft audit report with findings addressing audit objectives and scope to the IT Audit Manager.
• Address review notes from the IT Audit Manager and capture close-out meeting minutes.
• Track the auditee's progress in resolving findings by conducting follow-ups.
• Provide assurance and recommend controls to business units in accordance with the relevant laws and regulations and National Treasury frameworks.

Stakeholder Management

• Facilitate and manage communication with relevant internal and external stakeholders in relation to investments and proactively and progressively manage the relationships.
• Communicate with all levels of stakeholder contacts.

Qualifications and Experience

• Bachelor's Degree/ Advanced Diploma in Auditing, Computer Auditing, Information Technology related qualification.
• Registered with the Institute of Internal Auditors and/or ISACA.
• CISA is compulsory.
• CRISC/ CISM/ CGEIT will be an added advantage.
• Relevant 5 - 7 years' experience in an auditing environment.
• Experience in the completion of SAP Basis, General Controls Reviews GCR's as well as Application Controls Reviews ACR's, SDLC, and Cyber Security.

Technical and behavioral competencies required

• Communication.
• Working with people.
• Planning, organizing and coordinating.
• Employee engagement.
• Ethics and values.
• Client service orientation.
• Change management.
• Facilitation and presentation skills.
• Risk management.
• Reporting.
• Computer literacy and Internet.
• Analytical skills
• Principles of Project Management.
• Microsoft Office Suite.
• International Standards for the Professional Practice of Internal Auditing.
• Principles relating to Governance, Risk Management and Public Finance Management Act.
• Understanding of IT governance practices, IT risk management principles and Cyber Security principles
• Exposure to COBIT, ITIL, IIA and ISO standards
• Use of CAATS tools, preferably ACL
• Use of an audit management system, preferably TeamMate.