Internal Audit Manager: Cyber Security

2 weeks ago


Johannesburg, South Africa Absa Bank Limited Full time

Bring your possibility to life Define your career with us
- With over 100 years of rich history and strongly positioned as a local bank with regional and international expertise, a career with our family offers the opportunity to be part of this exciting growth journey, to reset our future and shape our destiny as a proudly African group.Job Summary

The Cyber Security Audit Manager (Vice President) role is a specialist role in the Absa Internal Audit function. The role is mainly responsible for the planning, execution and management of cyber security audits in accordance with the bank’s audit plan, relevant policies, procedures and quality standards covering information systems, network technologies, security solutions and cyber processes.

**Job Description**:
The Cyber Security Audit Manager will be required to perform the following:

- Use knowledge of cyber security practices such as penetration testing, configuration management, network management, patch management, vulnerability management, cyber incident response, identity and access management, cloud security and encryption to conduct audits using the audit function’s methodology.
- Develop and maintain relationships with accountable stakeholder management within the bank. The Cyber Security Audit Manager should be able to present effectively at stakeholder meetings and forums (e.g.: Risk and Governance Forums) by sharing knowledge and information, including methodology, standards, changes and new developments, with business stakeholders on an ongoing basis.
- Use business knowledge, and outcomes of assurance work and continuous monitoring to assess evolving risks and the control environment of the bank. The Cyber Security Audit Manager will be required to write high quality reports for presentation at Risk and Governance forums.
- Participate and prepare the annual audit plan by taking into account the risk and control profile, business strategy and material risks affecting the business.
- Take ownership and initiative, to negotiate, influence and build consensus and successfully navigate audit delivery within timelines and quality criteria. Leading internal audit project teams, working closely with peer VPs, define audit scopes and oversee audit testing, including drafting internal audit findings and reports for discussion with senior management. This includes a strong acumen regarding auditing methods and industry practices for technology, cyber and information security risks.
- Drive advancement and development in the analytics and robotics automation space through defined strategic initiatives. This will include finding efficient means of performing audit procedures.
- Improve technical knowledge through self-learning or training including mandatory Continuous Professional Education requirements.

Knowledge & Skills:

- Up-to-date knowledge of cyber threats, techniques and processes.
- Ability to define risks, controls and testing strategies in accordance with leading practice requirements.
- Technical skills required to assess the security of network devices (Routers, Switches, Firewalls, Proxies, etc.), security solutions (Anti-virus, End-Point Detection and Response etc.), information systems (Operating Systems, Databases and Applications) and supporting processes.
- Internal and External vulnerability assessments and penetration testing.
- Ability to articulate complex issues clearly.
- Report writing.
- Cyber and information security risk management, monitoring and reporting.
- Awareness of regulatory and compliance environment Level.
- Manage time, resources and budget effectively Level.
- Industry and product knowledge.

Accountability: Reporting
- Assess, challenge and monitor and prepare high quality, relevant and insightful reporting for risk committees in ITO and Group wide. Include audit delivery, issue validations, business monitoring insights and key MI relating to open/overdue/reopened audit issues etc, drivers for our CE and MCA assessments, emerging/watching brief risks. Ensure data integrity and factual accuracy of report prior to submission to EL/PH for review.
- Review and check and challenge first and second line of defense reporting on the control environment and management control approach.
- Strong collaboration with the Centers of Excellence (CoE) counterparts to derive insights for impactful reporting.

Accountability: Audit Planning
- Actively participate and provide high quality, relevant and impactful audits for ITO in the annual audit planning process. Manage and facilitate the planning deliverables and interlocks with the wider IA.
- Report progress on Combined Assurance testing performed by IA, closely monitor ITO combined assurance strategy/progress, and actively participate in the combined assurance and risk forums.

Accountability: Management & Leadership 15%
- Provide thought leadership and input into the strategy for the ITO IA Team.
- Actively play a senior role in the ITO Management Committees and de



  • Johannesburg, South Africa Isilumko Staffing Full time

    A top company in the Energy and Chemical Industry is seeking a highly skilled and experienced Senior IT Auditor with a strong background in Cyber Security to join their dynamic team. As a Senior IT Auditor - Cyber Security, you will play a key role in evaluating and enhancing the security of our IT systems and processes. Key Responsibilities:Cyber Security...


  • Johannesburg, South Africa Nedbank Full time

    **Requisition Details & Talent Acquisition Contact** - REQ 133209- Tshego Semenya- Location: Johannesburg- Closing date: 26 April 2024**Cluster** - Group Risk**Career Stream** - Auditing**Leadership Pipeline** - Manage Self Professional**Position** - Audit Portfolio Manager: Cyber**Job Purpose** - The objective and scope of work of GIA is to determine...


  • Johannesburg, South Africa Isilumko Staffing Full time

    Manage and execute IT audits with a specific focus on information and cyber security in order to mitigate information management and cyber security risks impacting operations and to provide subject matter expertise. Manage audit budgets and resource allocations on assigned audit tasks and ensure timely reporting. Monitor the quality of executed audits.

  • Head, Internal Audit

    4 weeks ago


    Johannesburg, South Africa Standard Bank Group Full time

    Job Description To lead and review the audit process for Information and Cyber Security across the group in line with the Group Internal Audit strategy to provide independent and objective assurance and advice within a segment or area of expertise to ensure sustainable client centric management of risk across SBG. Contribute to the development and...


  • Johannesburg, South Africa Telebest Full time

    Requirements:5 years of experience in Cybersecurity, engineering, or security vulnerability remediationIn-depth knowledge of MS Azure security platform (MS Intune / DRM / O365 Security)In-depth knowledge of Firewalls and Malicious Code Defence including APTKnowledge of Cybersecurity technical assessments, standards, tools, and processesExtensive knowledge of...


  • Johannesburg, South Africa Isilumko Staffing Full time

    Short Description / Purpose of Job:Manage and conduct IT audits, with a primary focus on information and cyber security, for a major global chemicals and energy company. The goal is to mitigate information management and cyber security risks that impact the business operations and provide expert insights. Effectively oversee audit budgets and resource...

  • Project Manager

    4 weeks ago


    Johannesburg, South Africa BASHR Recruitment Full time

    **Requirements**: - Bachelor’s degree in Business, Information Systems or a related field required. - 5 years of experience in project management or project leadership with an emphasis on cyber security - Previous experience in security operations or cyber threat intelligence preferred. - 6 years of work experience with an emphasis on information...


  • Johannesburg, South Africa BASHR Consulting Full time

    **Job Details**: **Department** **other** **Minimum experience** **Mid-Senior** **Company primary industry** **Information Technology and Services** **Job functional area** **Information Technology** **Salary** **R400 000 - R600 000 per annum** Job Specification: Cyber Security Analyst Position Overview: **Responsibilities**: 3. Develop and...


  • Johannesburg, South Africa BASHR Consulting Full time

    A fantastic opportunity has come up for an experienced Cyber Information Security Analyst to join a dynamic team in Johannesburg. As a Cyber Information Security Analyst, you will need to be hands-on management, guidance, and recommendations for all operational Information Security platforms. The role will be a liaison between Operations and IT Governance...

  • Senior Specialist

    4 weeks ago


    Johannesburg, South Africa MTN Nigeria Full time

    **1. Mission/ Core purpose of the Job** To translate the overarching MTN Business strategy into actionable technology solutions and ensure operational excellence of Cyber Security Services system architecture. Provide and ensure cutting-edge security and performance for Cyber Security Services business, data governance, and good data practices. Suggest and...


  • Johannesburg, South Africa Exclusively Remote Full time

    Experienced IT Support Specialists skilled Cyber SecurityWe are seeking skilled Cyber Security Support Specialists to join our clients dynamic team. As a Cyber Security Support Specialist, you will be responsible for providing technical support and assistance to ensure then integrity, confidentiality, and availability of our organization's information...


  • Johannesburg, South Africa Recru-it Full time

    Key Roles and Responsibilities: Determine who requires access to which information & Plan, coordinate, and implement information security programs. Help protect against Web threats that facilitate cyber-crime like malware, phishing, viruses, denial-of service attacks, and hacking. Ensure you know and follow the incident and change processes, Perform Problem...


  • Johannesburg, South Africa Recru-it Full time

    Key Roles and Responsibilities:Determine who requires access to which information & Plan, coordinate, and implement information security programs.Help protect against Web threats that facilitate cyber-crime like malware, phishing, viruses, denial-of service attacks, and hacking.Ensure you know and follow the incident and change processes, Perform Problem...


  • Johannesburg, South Africa Adzuna ZA B C2 Full time

    Key Roles and Responsibilities:Determine who requires access to which information & Plan, coordinate, and implement information security programs.Help protect against Web threats that facilitate cyber-crime like malware, phishing, viruses, denial-of service attacks, and hacking.Ensure you know and follow the incident and change processes, Perform Problem...


  • Johannesburg, South Africa Cloudtrace Pty Ltd Full time

    **The Role** We are looking for a SOC Analyst to become part of our rapidly expanding team protecting our clients from cyber security threats. This is primarily a blue team role with additional exposure and involvement to penetration testing techniques and tools in order to validate security exposures detected by our attack surface management platform. Our...


  • Johannesburg, South Africa Standard Bank Group Full time

    Job Description To lead and review the audit process for a portfolio of audits through audit execution and oversight of the audit team to independently and objectively provide assurance that enables client centric risk management. Build strong relationships with relevant senior internal stakeholders to understand the business and to enable assurance...


  • Johannesburg, South Africa Nedbank Full time

    **Job Classification** **Business Information Cyber/Privacy Administrator/Contract position** - Job Family- Information Technology - Career Stream- It Risk - Leadership Pipeline- Manage Self: Technical - FAIS Affected**Job Purpose** - Core focus will be to assist the administration of Information Security governance and compliance processes and monitoring...


  • City of Johannesburg, Gauteng, South Africa BASHR Consulting Full time

    **Job Details**: **Department** **Information Technology** **Minimum experience** **Mid-Senior** **Company primary industry** **Information Technology and Services** **Job functional area** **Information Technology** **Salary** **R900 000 - R960 000 per annum** A fantastic opportunity has come up for an experienced Cyber Information Security...


  • Johannesburg, South Africa Vodafone Full time

    **Role purpose**: **Your responsibilities will include**: Take a proactive approach to ongoing evaluation of cyber security policies to ensure security policy adherence related to VFS and DLS Support/assist with the development and management of the 3-to-5-year Cyber Security Strategy across the DLS and VFS entity. Achieve and maintain and target Cyber...


  • Johannesburg, South Africa Telebest Full time

    Our client has an opportunity available for an Information Security Analyst.Requirements:5 years’ experience within either an Information Security position or Cybersecurity, which include protection against social engineering, or security vulnerability remediation, of which:2 years’ IT administration experience.2 years’ Ethical Hacking...