Group Manager Technology Assurance & Cyber Security Auditor

Location: Togo

Job Title:

Group Manager Technology Assurance & Cyber Security Auditor

Reports to:

Group Lead, Technology Assurance & Cyber Security Auditor

Location:

TBC

JOB PURPOSE

The Technology Assurance & Cyber Security auditor role is responsible for examining and evaluating the effectiveness of the organization's internal controls, risk management, and governance systems, particularly in the domains of information technology, information security, and cyber security. This position ensures that the organization's IT infrastructure, data, and processes are secure, compliant with regulations, and aligned with strategic business objectives. The role also involves identifying areas of improvement and implementing effective IT activities to safeguard the organization against cyber threats.

JOB CONTEXT

This position will require the candidate to exhibit integrity, diversity, flexibility and objectivity. The candidate should have good insights and instincts, ability to proactively identify key risk and challenges and build partnership with various stakeholders.

The person would have the responsibility to ensure control weaknesses within Information Systems, Technology and Cyber Security are properly identified and monitored.

KEY RESPONSIBILITIES

1. Information Systems Audit and Cyber Security

* Conduct thorough audits of information systems to identify and mitigate potential risks related to information security and cyber security.

* Plan and execute risk-based audits of IT infrastructure, including networks, telecoms, operating systems, databases, business applications, and cyber security controls.

* Evaluate the effectiveness of existing information security measures and recommend enhancements to safeguard data and systems.

* Monitor and report on key IT and cyber security risks, ensuring timely mitigation of vulnerabilities.

* Perform regular reviews and assessments of new technology products/services, focusing on information security and cyber security risks.

* Participate in the review and evaluation of technology projects to ensure they meet security standards and compliance requirements.

* Share audit findings and recommendations for corrective actions with management, providing final reports promptly.

* Conduct ad-hoc reviews of critical business applications and processes to ensure robust security measures and compliance.

2. Risk Management and Compliance

* Assess risk appetite, escalation procedures, and decision-making processes within the risk management function, with focus on technology and cyber security risks.

* Ensure the adequacy of risk management systems and processes for identifying, measuring, assessing, controlling, responding to, and reporting on all risks resulting from the organization's activities.

* Verify the integrity of risk management information systems, ensuring data accuracy, reliability, and completeness.

* Oversee the approval and maintenance of risk models, ensuring consistency, timeliness, independence, and reliability of data sources.

* Focus on evaluating technological, information security, and cyber risks, ensuring robust defenses and compliance with all relevant regulations.

* Assess the effectiveness of operational resilience and cyber resilience frameworks to ensure continuity of critical business services and technology operations.

* Evaluate critical digital dependencies, third-party technology risks, and concentration risks associated with cloud services, digital platforms, and strategic technology providers.

* Review resilience preparedness, incident response capabilities, and recovery strategies relating to critical technology assets and cyber threats.

3. Audit Planning, Execution and Follow up

* Develop & Execute IT and cyber security audit programs tailored to the organization's needs, thoroughly examining all operational areas and guiding the collection of relevant data, documentation review, and communication of operational improvements.

* Engage with stakeholders to stay informed of changes and new initiatives, sharing audit perspectives on risk identification and mitigation.

* Utilize data analytics and automation tools - including SQL, Power BI, Power Automate, and Audit Command Language (ACL) - to develop continuous auditing tests across IT and business areas.

* Leverage AI-enabled assurance techniques, including predictive analytics, intelligent monitoring, and AI-assisted auditing, to enhance risk identification, continuous assurance, and audit effectiveness.

* Utilize advanced analytics and emerging technologies to proactively identify anomalous activities, control weaknesses, and emerging technology risks across the Group.

* Evaluate and verify that controls meet established assurance objectives, maintaining working paper evidence of control examinations.

* Follow up the implementation and effectiveness of issues identified during previous audits.

* Evaluate progress, address any lingering issues, and ensure continuous improvement.

* Develop and oversee the execution of the annual audit plan,…