Manufacturing

Internal Audit Manager

Discovery Limited·Gauteng, south-africa·Full Time·Contract
ManufacturingFull TimeContract
-

Job Purpose

  • Lead risk-based IT audits across infrastructure, cloud, cybersecurity, data, payments, and digital channels to provide independent assurance over technology risks and controls. Strengthen the bank's control environment, meet local regulatory expectations, and enable secure innovation at speed.

Areas of responsibility may include but are not limited to:

Audit Planning & Governance

  • Develop and maintain the risk-based IT audit plan aligned to the bank's strategic objectives, risk appetite, and Three Lines Model.
  • Perform technology risk assessments covering cloud (IaaS/PaaS/SaaS), cybersecurity, data & AI/ML, DevSecOps, third party risk, payments, open banking/APIs, and resilience.
  • Ensure conformance with the International Standards for the Professional Practice of Internal Auditing (IIA Standards / IPPF) and alignment to King IV principles on governance.
  • Prepare Audit Committee packs for IT audit coverage, opinions, key themes, and trend analyses.

Execution of IT Audits - Lead end to end audits (scoping, fieldwork, issue validation, reporting) over:

  • IT General Controls (ITGCs) and application controls across core banking, digital channels, and enablement platforms.
  • Cybersecurity (governance, identity & access, SOC, vulnerability/patch, incident response, endpoint, network & cloud security).
  • Cloud & platform engineering (architecture, configuration, CSP shared responsibility, IaC controls, container/Kubernetes security).
  • Data governance & privacy (POPIA, data lineage/quality, access, ISO/IEC 27701 alignment).
  • Payments & cards (EFT, RTGS, card acquiring/issuing, PCI DSS scope and interfaces).
  • Business continuity & operational resilience (BCP/DR, RTO/RPO, scenario testing).
  • Third party & fintech partnerships (onboarding due diligence, contracting, ongoing monitoring, exit plans).
  • Change, SDLC & DevSecOps (agile ceremonies, CI/CD, testing, segregation of duties, release management).
  • AI/ML & model risk (data sourcing, bias, explainability, monitoring, access, change controlcoordinating with Model Risk/Internal Audit specialists).

Issue Management & Stakeholder Engagement

  • Produce clear, prioritized reports with root cause, business impact, and actionable remediation:
  • Track and validate remediation; escalate overdue/high risk issues.
  • Build strong relationships with CIO/CTO/CISO, Data, Engineering, Product, Risk, and Compliance while maintaining independence.

Data Led Assurance & Continuous Auditing

  • Drive data analytics in audits (e.g., log analysis, user access analytics, config drift, control health dashboards).
  • Pilot continuous monitoring and controls automation where feasible; mentor the team on Python/SQL/Power BI usage.

Regulatory and Standards Alignment

  • Align assurance to Banks Act requirements and Prudential Authority (SARB) expectations, POPIA, FICA, NCA, and Payment System rules where applicable.
  • Reference and benchmark against COBIT, NIST CSF/800 53, ISO/IEC 27001/2, PCI DSS, CIS Controls, and internal policies/standards.

People, Quality & Vendor Management

  • Manage, coach, and upskill the audit team; curate an annual training plan (CISA/CISM/CISSP, cloud security, data analytics).
  • Oversee co-sourced audit partners; set scope, quality criteria, and deliverable timelines.
  • Perform engagement quality reviews and maintain a robust internal audit Methodology & QAIP (Quality Assurance and Improvement Program).

Personal Attributes and Skills

  • Risk based, outcome oriented thinker with strong professional skepticism and independence.
  • Executive presence & communication: able to distill complex tech risks into concise messages for EXCO/Audit Committee.
  • Collaboration & influence: builds trust with Technology and Product while holding firm on control requirements.
  • Learning agility: keeps pace with cloud native architectures, platform engineering, AI/ML, and evolving threats.
  • Structured problem solver with strong root cause and issue prioritisation skills.
  • Ethical judgement and confidentiality aligned to IIA Code of Ethics.
  • Resilience under pressure; comfortable challenging senior stakeholders.
  • Excellent writing (findings, opinions, and board level reporting).
  • Banks Act and SARB Prudential Authority supervisory expectations (incl. IT/cyber risk, outsourcing, operational resilience).
  • POPIA, FICA, NCA, Payments Association of SA rules, and relevant PCI DSS obligations.
  • Corporate governance via King V and alignment to the IIA Standards (IPPF).

Education and Experience

  • Bachelor's degree in Information Systems, Computer Science, Engineering, Risk/Audit, or related field (required).
  • Professional certifications (one or more required): CISA (preferred), CIA (advantage), CISM/CRISC/CISSP, ISO 27001 Lead Auditor/Implementer (advantage).
  • Cloud security certifications (e.g., CCSP, AWS/Azure security specialty) advantageous.
  • Data & analytics: demonstrable SQL and/or Python skills; data privacy certification (e.g., CIPT) advantageous.
  • 8 - 10+ years total experience in IT audit, technology risk, cybersecurity, or related assurance
  • 3 - 5+ years in a managerial/lead role.
  • Banking/fintech background essential; digital retail bank experience strongly preferred.
  • Led multiple audits across cloud, cybersecurity, digital channels, payments, core banking, data governance, and thirdparty risk.
  • Experience interfacing with Audit Committees, regulators, and external auditors.

Key skills

BachelorsProfessional Certificate
Apply Now

At a glance

Company

Discovery Limited

Location

Gauteng, south-africa

Employment

Full Time

Experience

Valid until

Not specified

Created

July 24, 2026

More opportunities

Similar roles you might like

Internal Auditor

Amatola Water

Eastern Cape, south-africa

full-time

Minimum Qualification: NQF Level 6, National Diploma / Undergraduate as recognised by SAQA in Auditing/Internal Auditing/Accounting/Financial Information Systems/Information Systems as recognized by SAQA. Preferred Qualification: Occupational Certificate: Internal Audit will be an added advantage Minimum Experience: 2 years internal auditing experience Professional Registration: Registered as a member of the Institute of Internal Auditors Key Outputs: Reporting to the Internal Audit Specialist, the appointee will: Conduct background research, compile prior audit findings, compile relevant documentation, assist with audit planning, process mapping and provide input during engagement risk discussions. Perform audit fieldwork in accordance with the approved audit programmes and internal methodologies. Perform control testing, substantive procedures, and data analysis, ensuring sufficient and appropriate audit evidence is obtained. Report Findings and Follow-Up Evaluate the adequacy and effectiveness of internal controls and provide insights and recommendations for process improvements where necessary. Prepare audit reports aligned with the work performed during the fieldwork, ensuring clarity and accuracy. Communicate audit and consulting engagement results through written reports and presentations to management. Build and maintain professional working relationships with internal stakeholders Interact with internal and external stakeholders such as Risk Management, External Audit, Legal Services, and Regulators during audit engagements Timely and accurate execution of audit procedures in line with audit plans Quality and completeness of audit working papers and documentation Contribution to clear, accurate, and value-adding audit reports Carry out reasonable and lawful instructions as given by the Internal Audit Manager and or the Internal Audit Specialist within the ambit of the position taking into consideration competencies and operational requirements Key Competencies: Knowledge of the Public Finance Management Act and National Treasury Regulation. Knowledge of the standards set by the institute of Internal Auditors (IIA), A valid unendorsed driver's licence. MS Office (Word, PowerPoint, advanced Excel) Knowledge and understanding of Principles relating to Governance, Risk Management Audit techniques (work programs, tests, sampling. documentation, reports)

6 days ago

Internal Audit Specialist

Amatola Water

Eastern Cape, south-africa

full-time

Minimum Qualification: B-degree with Auditing / BTech Diploma Internal Auditing, Accounting or Finance. Preferred Qualification: CIA /CISA / CA(SA) / CFE / CRMSA will be added advantage Minimum Experience: 3 years internal auditing experience and at least 2 years of staff supervision in an Internal Auditing environment Professional Registration: Registered as a member of the Institute of Internal Auditors. Key Outputs: Reporting to the Senior Manager: Internal Audit, the appointee will: Manage Audit Planning and Execution Drive execution of the audit plan within assigned portfolios, including allocation of audits to Internal Auditors. Align audit planning and execution with organisational risks, regulatory expectations, and best-practice audit methodologies. Lead engagement initiation activities, including issuing of audit notifications to management, facilitating scope confirmation meetings with management and conducting engagement-level risk assessments. Lead and Coordinate Leadership and Quality Assurance Lead and manage internal audit engagements from initiation through to final reporting, ensuring compliance with the IIA Standards, IPPF and internal methodologies Conduct in-depth assessments of processes, risks, and controls to determine control adequacy, effectiveness, and efficiency. Ensure Risk Management and Control Evaluation Evaluate risk exposures across financial, operational, credit and development activities. Assess the design and operating effectiveness of internal controls, identifying weaknesses and root causes Manage Reporting and Governance Consolidate audit findings into clear, concise, and impactful reports, and prepare and present these to management. Maintain complete, accurate, and well-documented audit working papers in line with internal standards and audit trail requirements. Supervise and develop Internal Audit Team Supervise, review, and quality assure work performed by Internal Auditors and Interns. Carry out reasonable and lawful instructions as given by the Internal Audit Manager and or the Internal Audit Specialist within the ambit of the position taking into consideration competencies and operational requirements Key Competencies: MS Office (Word, PowerPoint, advanced Excel) Knowledge and understanding of international Standards for the Professional Practice of Internal Auditing, principles relating to Governance, Risk Management and Public Finance Management Act. Audit techniques (work programs, tests, sampling. documentation, reports) Analytical skills Above average English communication skills (written and verbal). Ability to build relationships while asking tough questions Report writing and presentation skills. Ability to work independently, as well as part of an auditing team. Valid unendorsed drivers licence

6 days ago

Practioner: Internal Audit

Hire Resolve

Mpumalanga, south-africa

full-time

Hire Resolve is seeking a detail-oriented, highly analytical Practitioner: Internal Audit to join the Finance Division of a leading metals and manufacturing group in Middelburg, Mpumalanga. Reporting directly to the Internal Audit Manager and working under the supervision of the Group Chief Audit Executive, this full-time, on-site role is responsible for evaluating internal controls, executing audit plans, conducting risk assessments, and delivering high-impact operational efficiency recommendations. Key Performance Areas: Audit Execution & Control Testing: Evaluate audit procedures, execute control testing, and draw conclusions to enhance operational efficiency and mitigate business risks. Audit Plan & Systems Review: Plan, execute, and report on audit engagements in accordance with group methodology, ensuring at least 80% of the annual Internal Audit plan is completed on schedule. Risk Management & Compliance: Assess compliance with applicable laws, regulations, internal policies, and governance frameworks (King IV/V) across all business operations. Management Reporting & Audit Follow-ups: Compile clear, objective audit reports for executive review, convey recommendations convincingly, and manage follow-ups on open audit findings. Continuous Improvement & Training: Maintain knowledge of emerging risks and business trends, completing at least 20 hours of professional training annually. Minimum Requirements: Education & Credentials: Chartered Accountant CA(SA) qualification (NQF Level 8) is mandatory. Audit Experience: 4 to 6 years of relevant Internal and/or External Auditing experience (including completed articles/graduate training program). Big Four Exposure: Big Four auditing firm experience is strictly required, alongside exposure to diverse business sectors, risk frameworks, and control improvements. Technical Standards & Frameworks: Strong working knowledge of Internal Audit Standards, IFRS, King IV & V Codes of Corporate Governance, and financial/operational internal controls

17 days ago

Bdo Wave - Internal Audit Consultant, Gqeberha (port Elizabeth)

BDO South Africa

Eastern Cape, south-africa

full-time

Description As an Internal Audit Consultant, you will support the delivery of a diverse portfolio of in-house internal audit, risk management and advisory engagements across BDO. Working as part of a collaborative Internal Audit team, you will contribute to audits covering a wide range of BDO's business processes, functions and strategic initiatives. This role provides an excellent opportunity to develop your internal audit, risk management and stakeholder engagement skills within a dynamic professional services environment. You will work closely with Internal Audit Managers and the Head of Internal Audit, gaining exposure to senior stakeholders across the Firm, while supporting the continuous improvement of the Internal Audit function. The primary focus of the role is to assist in the planning, execution and reporting of internal audit engagements, delivering high-quality work in line with BDO's Internal Audit methodology and professional standards. Requirements Key Responsibilities Audit Delivery Support the delivery of internal audit engagements from planning through to reporting, applying BDO's Internal Audit methodology and seeking guidance where appropriate. Perform a range of audit testing and assurance procedures to evaluate the design and effectiveness of controls. Gather, analyse and interpret evidence to support clear, balanced and evidence-based audit findings. Document work performed to a high standard, ensuring audit files are complete, accurate and compliant with methodology requirements. Assist in the drafting of audit observations and reports, clearly communicating risks, impacts and recommendations. Analysis and Problem Solving Analyse data, processes and information to identify trends, control weaknesses and opportunities for improvement. Apply critical thinking and professional scepticism when assessing risk and evaluating evidence. Use data and technology-enabled auditing techniques where appropriate to enhance audit effectiveness and efficiency. Stakeholder Management Build positive working relationships with stakeholders at all levels across the Firm. Communicate professionally and effectively with engagement stakeholders, keeping them informed of progress and key matters arising. Support the delivery of a high-quality service that adds value to the business and promotes the role of Internal Audit. Team and Personal Development Manage workload effectively, delivering assigned tasks within agreed budgets and timescales while balancing multiple priorities. Actively pursue professional and technical development, maintaining progress towards relevant professional qualifications. Contribute to Internal Audit team initiatives, including methodology enhancements, knowledge sharing and continuous improvement activities. Collaborate with colleagues across the team, demonstrating a positive, flexible and supportive approach. Skills and Experience Essential Part-qualified (or working towards) ACA, ACCA, CIA, CMIIA or an equivalent professional qualification. Experience of internal audit, risk management, assurance, controls testing or a related discipline. Strong analytical and problem-solving skills, with the ability to interpret information and draw logical conclusions. Good written and verbal communication skills. Effective organisational and time management skills. Proficient in Microsoft Office applications, particularly Excel, Word and PowerPoint. Ability to work collaboratively as part of a team while taking ownership of individual responsibilities. Desirable Experience of auditing within a professional services environment. Basic knowledge of IT General Controls (ITGCs) and technology-related risks. Experience using data analytics tools to support audit testing and assurance activities. Knowledge of internal audit standards and risk management frameworks. Behaviours Successful candidates will demonstrate: Curiosity and a desire to learn. Professional scepticism and attention to detail. Personal accountability and integrity. A collaborative and team-oriented mindset, particularly given the remote nature of the role. A commitment to delivering high-quality work and excellent stakeholder service. A proactive approach to communication, identifying opportunities for improvement and adding value.

a month ago

Group Financial Manager

Central Energy Fund (CEF)

Gauteng, south-africa

full-time

REQUIRED MINIMUM QUALIFICATIONS AND EXPERIENCE: Matric and honours degree in Accounting / Taxations or equivalent qualification. 12 years' experience in finance management and 5 years' experience in a senior management position. Registered Chartered Accountant (CA/SA) is required. Masters's degree (NQF 9) IN Accounting / Taxations or equivalent qualification will serve as an added advantage. DESIRED ADDITIONAL SKILLS/ COMPETENCIES: Extensive knowledge of IFRS and financial reporting standards Advanced knowledge of accounting principles Sound knowledge of applicable legislation and regulations i.e. CEF Act, PFMA and Treasury regulations. Ability to analyse complex transactions Problem-solving skills and knowledge of public sector financial management Ability to interact at different managerial levels Negotiations skills, Ability to work with different teams Ability to work under pressure and to coordinate complex exercises Ability to manage people and workflow KEY PERFORMANCE INDICATORS: Financial Policies and Procedures Develop and review financial policies and procedures for the Group aligned to the company strategy, and in accordance with the appropriate accounting standards. Facilitate the communication of financial policies and procedures across the Group. Act as the Group custodian of financial control policies and monitor adherence therein. Promote continuous improvement and compliance to financial policies and procedures. Monitor compliance to IFRS and National Treasury reporting guidelines. Tax Submissions Establish working methods for the submission of tax returns and provide guidelines to Accountants to avoid penalties. Review tax returns, SARS requests and reports and tax reconciliations. Coordinate the timeous preparation of tax calculations by the external service provider. Review VAT for return submissions per subsidiary. Financial Reporting Oversee the preparation of the consolidated and company Annual Financial Statement: Facilitate the provision of input from the relevant stakeholders. Review the financial statements and trial balances and provide commentary for submission to the CFO. Audit Process Facilitation Act as the key interface with Internal and External Auditors. Monitor that internal and external audit requests are communicated to the right people and that information has been provided timeously. Review and respond to audit findings. Participate in regular meetings with the Internal Audit Manager to discuss progress and pressing issues. Revenue Management Develop and maintain the SLAs between CEF SOC and entities receiving services from CEF SOC. Negotiate terms of the SLAs and propose reviews of SLAs taking into account changes in the factors affecting the revenue environment. Recover the revenues due to CEF SOC, follow-up on overdue revenue, initiate discussions to make arrangements for overdue revenue and ensure that the interests are charged on overdue revenue in terms of the SLA - Implement the SLAs. Manage CEF SOC loan accounts and facilitate reviews of repayment terms with relevant parties. Oversight of Transactional Accounting Functions Provide guidance and oversight of the day-to-day transactional functions performed by the accountants, encompassing the following: preparation and posting of journals verification of assets passing of new entries technical accounting matters Review drafts for motivations and finalise for submission to the CFO for approval. Authorise invoices and ensure that supporting documentation is attached to the invoices. Monitor the timeous payment of creditors and attend to those outstanding payments that have been escalated. Sign-off on monthly reconciliations. Monitor the maintenance of the asset register. Stakeholder Management Manage external stakeholder relationships with the Department of Energy, National Treasury, SARS and suppliers: Act as point of contact for CEF Holdings Liaise with suppliers Liaise with the Department of Energy for responses to queries and requests for information. Engage with the National Treasury on budgets and forecasting and monitor the quarterly and annual reporting therein. Manage relationships with internal stakeholders: Liaise between the CFO and the subsidiaries in the communication of information for roll-out. Represent Finance at different forums (e.g. Board Audit Committee and Procurement Committee) to provide commentary and feedback to the relevant stakeholders on finance issues. Act in an advisory capacity to management on financial management issues across the business. People Management Manage the administration of staff i.e. leave approval and travel expense approval. Conduct quarterly performance reviews of subordinates and attend to areas of non-performance. Identify training and development opportunities for subordinates. Provide coaching and mentorship to subordinates on financial management issues. Participate in the recruitment of staff members. Supervise outputs to ensure the deliverables of the Department are met. Closing Date: 28 June 2026

4 months ago

Internal Auditor: Senior

Tiger Brands

Gauteng, south-africa

full-time

THE JOB AT A GLANCE Your ultimate goal is to support the Internal Audit Manager and senior internal auditor in providing the Board, Senior Management and the Audit Committee assurance that the system of internal control is adequate and effective, risk management processes are working as intended and that the organization complies with the relevant Corporate Governance Codes as amended from time to time. WHAT YOU WILL DO Responsible for the execution of field work in support of delivery against internal audit coverage plans and budget Perform follow up testing and proactively follow up with management regarding the close out of previously raised audit findings Perform control self-assessment validations Execute ad-hoc management requests Ability to understand and apply computer-assisted auditing techniques (CAAT's) Document systems of internal control both financial and operational Documenting finding and recommendations as a key input into the draft report Assist the IA manager and senior internal auditor to prepare the final audit report Assists the IA manager and senior internal auditor in consolidating the monthly reporting of "open items" and other Internal Audit key performance indicators To ensure compliance on each audit assignment to the Tiger Internal Audit Methodology and Institute of Internal Auditors (IA) standards Execute other duties as delegated by the Internal Audit Manager Promotes professional and productive working relationships with management WHAT YOU'LL BRING TO THE TABLE Key attributes and competencies Technical capability - Proficient in assessing systems of internal controls Business Process understanding - Possess technical knowledge of processes, risks, controls and business best practices Integrity and Ethics - Display high levels of integrity and trust as well as exercise professional judgment objectively and independently Communication - Ability to demonstrates excellent communication skills - both oral and written Innovation - Ability to actively pursue innovative and new ways of performing an audit tasks and hence creating value for the business Experience CA(SA) - Non-negotiable Credible auditor with at least 3 years experience and understanding of internal controls, risk management and audit standards WHAT YOU WILL BE MEASURED ON Execution of internal audits as per the audit coverage plan in accordance with internal audit methodology and the IIA standards.

5 months ago