Information Technology Auditor

The IT & Cyber Audit supports the Internal Audit function in providing independent and objective assurance over IT systems, cybersecurity controls, and digital initiatives. The role focuses on assessing the adequacy and effectiveness of IT governance, information security, cyber resilience, and technology-enabled processes to ensure alignment with regulatory requirements, organizational policies, and strategic objectives. The position contributes to strengthening the organization’s control environment, managing technology risks, and enhancing trust in digital services and platforms.

• Plan and execute IT and cybersecurity audits in accordance with the approved audit plan and internal audit methodology.
• Assess General IT Controls (ITGCs), application controls, and cybersecurity controls across systems, platforms, and infrastructure.
• Evaluate compliance with relevant frameworks and standards (e.g., NCA, ISO 27001, COBIT).

• Conduct IT and cyber audit engagements.
• Review IT governance, security controls, and compliance with applicable frameworks.
• Assess risks and identify control weaknesses.

• Prepare clear, concise audit reports highlighting observations, root causes, risks, and practical recommendations.
• Track management action plans and validate the timely and effective closure of audit issues.

• Develop audit reports with actionable recommendations.
• Monitor remediation plans and verify issue closure.

• Engage with IT, cybersecurity, and business stakeholders to understand systems, processes, and risk exposures.
• Provide advisory input on control design for new systems, digital initiatives, and major IT projects when required.

• Collaborate with key stakeholders throughout audit engagements.
• Support management with advisory services on IT control design.
• Stay updated on emerging technology and cyber risks, regulatory changes, and leading audit practices.
• Contribute to the enhancement of IT audit tools, techniques, and methodologies.

• Monitor industry trends and regulatory developments.
• Enhance audit methodologies and leverage new audit techniques.

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field.

• Relevant experience in IT audit, cybersecurity, risk management, or technology assurance.
• Experience with in government, regulated environments, or large complex organizations is preferred.

• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• CRISC

• IT General Controls (ITGCs)
• Cybersecurity controls and frameworks
• Cloud and digital platforms
• Identity and Access Management (IAM)
• Data protection and privacy controls
• GRC tools and audit analytics

• Strong analytical and critical thinking skills
• Clear written and verbal communication
• Stakeholder management and collaboration
• Attention to detail and professional judgment