IT Auditor

Responsibilities:

• The technological innovation process creates a risk profile for current and future projects, focusing on the company’s experience with those technologies and its market position.
• Innovative comparison audit: looks at the organisation’s ability to innovate compared to competitors and evaluates how well the company produces new products.
• Technological position audit: examines current technology in the organisation and future technologies that will need to be adopted.
• Systems and applications:- evaluates whether systems and applications are controlled, reliable, efficient, secure, and effective.
• Information processing facilities:- evaluates an organisation’s ability to produce applications even in disruptive conditions
• Systems development verifies that systems that are being developed are suited for the organisation and meet development standards.
• Management of IT and enterprise architecture: Evaluate the IT organisational structure for information processing.
• Client, server, telecommunications, intranets, and extranets:- examines controls on client-connected servers and networks.
• Engage in systems/applications testing to ensure they meet agreed systems requirements.
• Review IT expenses to ensure there is value for money.
• Plan internal audit procedures.
• Monitor the outcome of IT End-of-Day/Month activities.
• Ensure that applications & systems are reviewed as planned.
• Coordinate system access administration of the Unit.
• Monitor the review of logs and vulnerabilities on the network.
• Carry out investigation of system incidents.
• Engage in User Acceptance Test (UAT) for both in-house developed and off-the-shelf applications.
• Represent the Group in the Change Management Committee and review the results of approved changes.
• Engage in application certification, implementations and due diligence engagements.
• Support ISO 27001 Information security management system certification,
• Support ISO 20000 IT Service management certification,
• Support PCIDSS annual assessment and certification. 
• Coordinate ISO 22301 Business Continuity Management System certification
• Evaluate Compliance with data protection.
• Follow up on issues raised by the Unit that require BSG attention.
• Engage users on the access requirement (access matrix).
• Provide support to end users on system access requirements.
• Engages in user education.
• Attend to the Board Audit committee and IT steering committee enquiries on IT-related issues.
• Prepare reports of significant findings for the Board Audit Committee.
• Answer queries on user activities on the system.
• Attended to Regulatory, External Auditors & Law Enforcement inquiries, discrete requests on system-related issues, electronic fraud, and other interbank activities.
• Represent the Group & the Bank in IS/IT Audit/Control/Security related meetings within   and outside the Bank.

Requirements:

• Minimum of a First Degree in any discipline with relevant professional certifications or a first degree in a numerate or IT-related discipline.
• Relevant professional certifications, such as Certified Information Systems Auditor (CISA).
• International Standard Organisation (ISO) certified, Certified Information Systems Security Professional (CISSP),
• Qualified Membership of the Information Systems Audit & Control Association (ISACA), and Qualified Membership of a Professional Accounting Body.
• MBA or other IT Certifications and/or a second degree are added advantages.