It Audit Manager

Integration Audit Manager: Group Internal Audit

What will you do? The Audit Integration Manager (Information Technology) role has been introduced to provide a more structured approach to audit delivery and collaboration between the Business Audit and IT Audit assurance teams in Group Internal Audit (GIA). The role is suited to Audit Specialists with in-depth auditing skills, knowledge, experience, and the ability to manage and co-ordinate the delivery of audit teams across the respective IT audit disciplines in the department, namely, IT General Controls (ITGC), Project Assurance, and Data Analytical Solutions (DAS). Reporting to the Head of Audit: Information Technology, the role incorporates the core responsibilities of an IT Audit Manager across the phases of the audit lifecycle, while allowing for the incumbent to be utilised in the capacity of a "Consultant" or a "Specialist", working independently and or managing audit engagement teams on high-risk areas or special assignments across the Group. The role requires a high degree of engagement with executive management, including the Group Information Security Officer and Group Chief AI Officer, as well as other key stakeholders. This includes close collaboration with the first and second lines of defence and external audit, in support of a combined assurance approach. In line with the organisation's evolving technology strategy, the Audit Integration Manager is expected to contribute to the establishment of robust governance frameworks to oversee and support the adoption of next-generation technologies, including artificial intelligence, machine learning, and cloud computing. Concurrently, the role will ensure that audit methodologies, plans, and procedures are appropriately enhanced to evaluate the design and operating effectiveness of key controls in these areas once implemented. What will make you successful in this role? The primary focus of the role is the management of the end-to-end audit lifecycle of ITGC audit assignments at a cluster level. This is done parallel to the co-ordination and or management of audit delivery on IT related assurance activities across the other IT audit disciplines namely, DAS and Project assurance. The role will also "serve" as the primary liaison between the Business Audit teams in GIA and the respective IT Audit assurance teams, with the key responsibilities of the role including the following: Annual audit planning - ensuring that audit effort is aligned with the strategy, objectives and emerging risks of the cluster. Resource planning and staff scheduling - managing the planning and allocation of resources from the respective resource pools for the cluster specific audit engagements. Audit execution - the management of all aspects of the end-to-end ITGC audit lifecycle including audit planning, audit execution, and audit reporting. Audit reporting - the incumbent will be responsible for all aspects of reporting at a cluster level, including, (i) the QA and sign off of reports produced by engagement teams, (ii) the co-ordination and follow-up of audit observations per business, per cluster, providing regular feedback in this regard to the respective Head of Audit or Audit managers in GIA, (iii) attendance at finance and risk forums and or audit committees during the quarterly reporting cycles where required. External audit engagement - where relevant, ensure that the external audit reliance requirements at an ITGC and application controls level are clearly understood and incorporated in the fieldwork done in GIA as appropriate. Client and assurance relationships and networking - ensuring regular discussions with senior management regarding focus areas, progress with strategies and emerging and existing IT risks. Liaising with external auditors, risk management, compliance and forensics to ensure that assurance provided is optimised. Management of "Specialist audit teams" - the role requires the incumbent to take responsibility for the co-ordination and or management of work performed by other specialist IT assurance teams in GIA (i.e. DAS or Project Assurance) for the cluster. Working independently as a "Specialist" - where and where necessary the incumbent will be required to work independently on high-risk projects or emerging risk areas, performing deep dive audits complex environments and processes. Qualification and Experience Relevant BTech (Diploma) or Bachelors Degree in Information Systems; Statistics; Data or Computer Science, Internal Auditing or Finance; Relevant professional certifications including, Certified Information Systems Auditor (CISA) certification, and or Certified Internal Auditor (CIA) certification (Advantageous) A minimum of 8-10 years of audit experience at an Audit Specialist level performing detailed audit work in at least 2 of the core audit disciplines, namely, (i) ITGC Audit, (ii) Project Audit Assurance, and (iii) Data Analytical Services (DAS). Detailed working knowledge of the GIA audit methodologies (across audit disciplines), tool sets and audit approaches in the relevant audit disciplines (as indicated in the point above). Experience in managing audit engagement teams through all aspects of the audit lifecycle, as well as the ability to work independently as an Audit Specialist in complex areas or IT processes. Client service delivery experience and the ability to interact with and manage stakeholder relationships at a Senior level both internal to GIA and the business. Other certifications such as ISO27001 or relevant AWS certifications will be advantageous, this includes ITGC and IT Technical Security audit work. Core competencies Living up to our Group-wide core competencies, will help you achieve a successful career with us. Cultivates Innovation: Creating new and better ways for the organization to be successful. Client Focus: Building strong customer relationships and delivering customer-centric solutions. Drives Results: Consistently achieving results, even under tough circumstances. Collaborates: Building partnerships and working collaboratively with others to meet shared objectives. Resilience: Rebounding from setbacks and adversity when facing difficult situations. Role competencies Decision Quality: Making good and timely decisions that keep the organization moving forward. Communicates Effectively: Developing and delivering multi-mode communications that convey a clear understanding of the unique needs of different audiences. Ensures Accountability: Holding self and others accountable to meet commitments. Business Insight: Applying knowledge of business and the marketplace to advance the organization's goals. Balances Stakeholders: Anticipating and balancing the needs of multiple stakeholders. Manages Ambiguity: Operating effectively, even when things are not certain or the way forward is not clear. Nimble Learning: Actively learning through experimentation when tackling new problems, using both successes and failures as learning fodder. Knowledge and Skills Risk and loss control Complex Internal Audits Reporting to various stakeholders Coaching and mentoring of junior auditors Audit performance and remedial action