Senior IT Auditor: IT

Date: 30 Mar 2025

Location: Cape Town, Western Cape, ZA

A position as a Senior Auditor exists within Group Internal Audit: Santam Corporate Services, based in the Cape Town office.

To conduct various types of assurance and consulting reviews with the primary focus on IT and Application Control audits across the Santam Group. This will be done in accordance with the annual audit plan approved by Santam's Audit Committee and conducted in terms of International Standards for the Professional Practice of Internal Audit. The role requires someone with strong IT skills as well as the ability to engage the IT and IS personnel and be comfortable engaging on concepts related to application and database architectures & infrastructure as well as complex business processes. The role also requires a person who can apply our risk-based methodology, lead and manage multiple audit assignments, and work independently.

• Conduct risk-based technology focused (IT) audit assignments to contribute to delivering on the internal audit plan approved by Santam's Group Audit Committee. This could include general computer control reviews, application control reviews, and reviews of IT controls within various business processes.
• Assignment work entails assignment planning, execution, reporting, and audit follow-up work (where applicable) including the following activities:
  • Performing risk and control assessments;
  • Developing, executing, and reviewing audit procedures;
  • Preparing audit findings and unpacking root causes with management;
  • Compiling an audit report and workshopping practical action plans with management;
  • Ensuring that audit work is documented on GIA's audit software tool and adheres to the required quality standards;
  • Ensuring that audit work is completed within time and cost budgets.
• Assist in reporting to various audit, risk & related committees.
• Provide input into annual audit planning.
• Follow up on audit issues raised and provide input into the reports to the audit committee and other relevant governance structures.
• Maintain quality standards in terms of the audit methodology, approach, and documentation.
• Support and mentor junior / trainee auditors.
• Manage client relationships with internal Santam stakeholders as well as external stakeholders, focusing on Information Security functions.
• Champion Internal Audit's role in the organisation by serving as GIA's representative at relevant Santam forums.
• National travelling to Santam offices and partners may be required.

• More than 4 years' experience in an audit/ consulting/ risk management/ governance or similar operations function.
• Experienced in performing IT general, application controls, and similar types of audits across various environments.
• Solid understanding of traditional business processes and how they interact at an application and database level.
• Advanced understanding of internal audit disciplines, methodologies, and practices.
• Experience in the insurance industry is preferred.
• Progress towards or completed CISA, CRISC, or similar.
• Good understanding of relevant security and control frameworks such as COBIT, ITIL, COSO, OWASP, CIS & similar frameworks.
• Experience with industry-leading audit software packages would be advantageous.

• Very strong numerical, analytical, and conceptual skills
• Analytical ability and logical reasoning
• Understanding of key controls and risk management principles
• Strong time management
• Excellent interpersonal, communication, and networking skills
• Relationship management (Strong client service orientation)
• Facilitation skills and ability to influence individuals, groups, and teams
• Strong verbal and written communication skills
• Conflict management and negotiation skills
• Ability to work effectively in a team as well as independently

Cultivates innovation - Contributing through others

Customer focus - Contributing through others

Drives results - Contributing through others

Collaborates - Contributing through others

Being resilient - Contributing through others

Santam is the leading short-term insurer in South Africa. Along with its subsidiaries, the business transacts all classes of short-term insurance. Santam is a large, diversified, and transforming company and our success is rooted in our passion for our clients.