IT Auditor

**IT Auditor**

**The Department**:
the Internal Audit department is an independent, objective assurance and consulting activity designed to add value to improve operations. The department assists the company accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control and governance processes. We achieve this by providing insight and recommendations based on analysis and assessment of data and business processes. With commitment to integrity and accountability, internal auditing provides value to stakeholders and senior management as an objective source of independent advice.

**Purpose of the Role**:
Information Technology (IT) Auditors help organizations secure its data and systems from external or internal threats by analysing and assessing their technology systems and infrastructure to ensure systems are secure, efficient, accurate and compliant. The IT Auditor will be responsible for planning and executing complex and specialized audits based on IT risk assessments as well as providing real time advisory services to the business providing counsel on IT control issues, recommended process changes and corrective actions.

**Duties include, but not limited to**:

- Perform independent IT risk assessments to identify high risk areas that require focus.
- Conduct IT related audits as guided by the risk based audit plan to assess the governance and management of data integrity, security, software development and IT governance within the business, including but not limited to:Pre and post-implementation reviews of system implementations or enhancements.
- Draft internal audit reports that are balanced, objective and supported by adequate audit evidence to influence the management of key risks.
- Effectively communicate and report on audit findings with all levels of management/ senior management.
- Develop and maintain collaborative relationships with management to advise/ influence IT risk management within the Group and promote effective change.
- Works proactively to provide input for improvements to processes within the Internal Audit function.

**Essential Criteria**:

- **Tertiary education in Information Systems/Security / similar**:

- **ISO Certification**:

- **At least 4 years IT auditing experience in the eCommerce industry**:

- **Extensive working knowledge of IT auditing requirements/ standards and methodology**:

- **Good knowledge of IT risk and control principles**:

- **Good understanding of multiple information technology domains including software development, operating systems, database management, information and network security to identify vulnerabilities that co**uld compromise the business
- Cyber security experience

**Desirable Criteria**:

- Use of audit software would be advantageous
- Basic Finance and Accounting knowledge
- Experience in running multiple projects

**Person Specifications**:

- Technical knowledge
- Interpersonal skills
- Thinking skills
- Organising & Planning
- Problem solving
- Influencing skills
- Knowledge Transfer

**Job Types**: Full-time, Permanent

Ability to commute/relocate:

- Cape Town, Western Cape: Reliably commute or planning to relocate before starting work (required)