Business, IT Governance & Operations Internal Auditor

Our firm is seeking a Business, IT Governance & Operations Internal Auditor to join on an immediate, part-time basis.

The objective of this role is to conduct independent internal audit processes regarding business and IT Governance and Operations environments. The auditor will assess the adequacy of controls and risk management across business and operational processes, systems, regulatory compliance, and resilience arrangements.

• Prepare the Internal Audit Project Plan, Statement of Work, Risk and Control Matrix, and Audit Program.
• Conduct preliminary surveys, stakeholder meetings, process walkthroughs, control assessments, and audit testing.
• Perform data analytics, identify potential fraud indicators, and maintain complete working papers and supporting evidence.
• Prepare the draft audit report, address review comments, and update the report based on management responses.
• Present audit results during closing meetings, finalize the audit report, and submit weekly status updates.

Bachelor's or Master's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Internal Audit, Risk Management, Business Administration, or a related field.

Professional certifications preferred (e.g., CISA, CIA, CISM, CRISC, CGEIT, COBIT, ITIL, ISO/IEC 27001, ISO 22301, or other relevant IT audit and governance certifications).

• Minimum 5-10 years of experience in business internal audit or IT internal audit, IT governance, technology risk, IT operations, or related assurance services.
• Demonstrated experience conducting end-to-end internal audits.
• Experience performing audit planning, risk assessments, walkthroughs, control evaluations, testing, and reporting.
• Strong experience reviewing IT governance frameworks, strategies, policies, procedures, responsibilities, and performance measures.
• Familiarity with COBIT, ITIL, ISO/IEC 27001, ISO 22301, and other relevant governance and control frameworks.
• Industry experience in banking and telecom preferred.

• Direct Report To:
  Director (Project Director of the Internal Audit).
• Indirect Coordination with Internal Client Teams.

• Strong knowledge of internal auditing, IT governance, IT operations, risk management, and internal controls.
• Strong understanding of risk-based internal audit practices and applicable IIA standards.
• Ability to translate complex IT processes into risks, controls, and audit procedures.
• Strong analytical, interviewing, testing, documentation, and report-writing skills.
• Ability to develop Risk and Control Matrices and detailed audit programs.
• Ability to identify root causes and provide practical, risk-based recommendations.
• Strong stakeholder management and communication skills.