Senior IT Auditor: IT, Information Security

2 months ago

Cape Town, South Africa Santam Insurance Full time

Senior IT Auditor: IT, Information Security & Cyber Security

Cape Town, Western Cape, South Africa

A position as a Senior Auditor exists within Group Internal Audit: Santam Corporate Services, based in the Cape Town office.

To conduct various types of assurance and consulting reviews with the primary focus on IT, Information Security and Cyber Security audits across the Santam Group (Santam Ltd, subsidiaries, brokers, portfolio managers, underwriting agencies and partners). This will be done in accordance with the annual audit plan approved by Santam’s Audit Committee and conducted in terms of International Standards for the Professional Practice of Internal Audit. The role requires someone with strong IT skills as well as the ability to engage the information and cyber security landscape and be comfortable interacting with IT security personnel. The role also requires a person who can apply our risk-based methodology, as well as lead and manage multiple audit assignments and work independently.

What will make you successful in this role?

- To conduct risk-based technology focused (IT) audit assignments ultimately to contribute to delivering on the internal audit plan approved by Santam’s Group Audit Committee. This could include general computer control reviews, information & cyber security reviews, reviews of IT controls within the various business processes (Application Controls) as well as pre and post-implementation reviews with a focus on information security.
- Assignment work entails assignment planning, execution, reporting and audit follow up work (where applicable) including the following activities:

- Performing risk and control assessments;

- Developing, executing and in some cases, reviewing audit procedures;

- Preparing audit findings and unpacking root causes with management;

- Compiling an audit report and workshopping practical action plans with various levels of management which will support the achievement of the Santam Group’s and our business partners strategic and financial objectives;

- Ensuring that audit work is documented on GIA’s audit software tool and adheres to the required quality standards;

- Ensuring that audit work is completed within time and cost budgets.

- Assist in reporting to various audit, risk & related committees.
- Provide input into annual audit planning.
- Follow up on audit issues raised and provide input into the reports to the audit committee and other relevant governance structures.
- Maintain quality standards in terms of the audit methodology, approach and documentation.
- Supporting and mentoring junior / trainee auditors.
- Client relationship management with internal Santam stakeholders as well as external stakeholders, with a focus on Information Security functions.
- Championing Internal Audit’s role in the organisation by serving as GIA’s representative at relevant, key Santam forums.
- National travelling to Santam offices and partners may be required.

Qualification and Experience

- More than 4 years’ experience in an audit/ consulting/ risk management/ governance or similar operations function and demonstrable exposure as per the job description.
- Experienced in performing IT general, information security and cyber security audits, including operating system and database security assessments/ reviews across a range of environments.
- Database and Operating systems security interrogation experience would be advantageous.
- An advanced understanding of internal audit disciplines, methodologies and practices.
- Experience in the insurance industry is preferred.
- Progress towards or completed CISA, CISM, CISSP or similar.
- Good understanding of relevant security and control frameworks such as COBIT, ITIL, COSO, OWASP, CIS & similar frameworks.
- Experience with industry leading audit software packages would be advantageous.

Skills

- Very strong numerical, analytical and conceptual skills
- Analytical ability and logical reasoning
- Understanding of key controls and risk management principles
- Strong time management
- Excellent interpersonal, communication and networking skills
- Relationship management (Strong client service orientation)
- Facilitation skills and ability to influence individuals, groups and teams
- Strong verbal and written communication skills
- Conflict management and negotiation skills
- Ability to work effectively in a team as well as by yourself

Core Competencies

Cultivates innovation - Contributing through others

Customer focus - Contributing through others

Drives results - Contributing through others

Collaborates - Contributing through others

Being resilient - Contributing through others

About The Company

Santam is the leading short-term insurer in South Africa. Along with its subsidiaries, the business transacts all classes of short-term insurance. Santam is a large, diversified, and transforming company and our success is rooted in our passion for our clients. Everything we do is centered on our delivery of insurance good and proper.

#J-18808-Ljbffr

  • Senior IT Auditor: IT, Information Security

    1 month ago

    Cape Town, Western Cape, South Africa Santam Full time

    About the RoleA challenging position as a Senior IT Auditor exists within Group Internal Audit at Santam Corporate Services, based in the Cape Town office.To conduct various types of assurance and consulting reviews with the primary focus on IT, Information Security, and Cyber Security audits across the Santam Group. This will be done in accordance with the...

  • Senior IT Auditor: It, Information Security

    6 months ago

    Cape Town, South Africa Sanlam Full time

    **What will you do?** - A position as a **Senior Auditor **exists within **Group Internal Audit**: Santam Corporate Services, based in the **Cape Town** office.- **What will make you successful in this role?** - To conduct risk-based technology focussed (IT) audit assignments ultimately to contribute to delivering on the internal audit plan approved by...

  • Senior IT Auditor: IT, Information Security

    6 months ago

    Cape Town, South Africa Sanlam Full time

    What will you do? A position as a Senior Auditor exists within Group Internal Audit : Santam Corporate Services, based in the Cape Town office. To conduct various types of assurance and consulting reviews with the primary focus on IT, Information Security and Cyber Security audits across the Santam Group (Santam Ltd, subsidiaries, brokers,...

  • Senior Infrastructure Security Engineer

    4 weeks ago

    Cape Town, South Africa Recru-it Full time

    Experience and Skills:- Minimum 7 years of experience in IT security, with at least 5 years focused on Active Directory- Proven experience in managing and securing multi-domain AD environments- Experience with AD integration in hybrid cloud environments- Experience in the technologies involved in networking, firewalls, Windows and Unix/Linux Operating...

  • Senior Infrastructure Security Engineer

    4 weeks ago

    Cape Town, South Africa Recru-it Full time

    Experience and Skills:- Minimum 7 years of experience in IT security, with at least 5 years focused on Active Directory- Proven experience in managing and securing multi-domain AD environments- Experience with AD integration in hybrid cloud environments- Experience in the technologies involved in networking, firewalls, Windows and Unix/Linux Operating...

  • Enterprise AD Security Architect

    4 weeks ago

    Cape Town, Western Cape, South Africa Recru-it Full time

    Job DescriptionWe are seeking an experienced Senior Infrastructure Security Engineer to join our team at Recru-it. This is a challenging role that requires a deep understanding of Active Directory security, firewall management, network security, and operating system security.Key ResponsibilitiesDesign and manage security configurations for AD environments,...

  • Senior security

    4 weeks ago

    Cape Town, South Africa Datafin IT Recruitment Full time

    Duties & Responsibilities ENVIRONMENT: Your strong passion for Information Governance and Cyber Security and technical expertise is sought to fill the role of a Senior Security & Systems Engineer by a dynamic Healthcare Service Provider. Your core role will be taking charge of the optimization, monitoring, and support of internal and client-facing Security...

  • Cyber Security and IT Auditor

    4 weeks ago

    Cape Town, Western Cape, South Africa Santam Full time

    At Santam, we're looking for a highly skilled Cyber Security and IT Auditor to join our team in Cape Town.About the RoleWe're seeking an experienced auditor with strong IT skills to conduct various types of assurance and consulting reviews with a focus on IT, Information Security, and Cyber Security audits across the Santam Group.Key ResponsibilitiesTo...

  • Cyber Security Architectural Lead

    2 weeks ago

    Cape Town, Western Cape, South Africa Recru-it Full time

    We are Recru-it, a leading technology firm, and we're seeking an exceptional Cyber Security Architectural Lead to join our team. As a key member of our cybersecurity department, you will be responsible for leading the design and implementation of secure infrastructure solutions that protect our organization from cyber threats.As a senior technical leader,...

  • Cloud and Devsecops Security Analyst

    6 months ago

    Cape Town, South Africa Progressive IT Resourcing Full time

    **Our Client ?** Is responsible for the provision of a Digitally Enabled Technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. They operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology governance and risk...

  • Business Information Security Specialist

    2 months ago

    Cape Town, Western Cape, South Africa Sanlam Full time

    Career OpportunitySanlam is seeking a highly skilled Business Information Security Specialist to join our team in the Business Information and Technology Services department.Key ResponsibilitiesEstablish and manage a comprehensive information security programme.Implement cybersecurity awareness campaigns and participate in group initiatives.Ensure...

  • Is Auditor

    2 weeks ago

    Cape Town, South Africa BDO South Africa Full time

    The IS Auditor is responsible to the IS Audit Manager for carrying out the work allocated to them, for keeping the Junior IS Audit Manager / IS Audit Manager informed of progress and of any problems or difficulties with that work and for ensuring that work is documented and concluded in accordance with the Firms policies and procedures. Keeping accurate time...

  • Senior Security Systems Specialist

    3 weeks ago

    Cape Town, Western Cape, South Africa Forum Security Solutions Full time

    Job Title: Senior Security Systems SpecialistCompany Overview:Forum Security Solutions is a reputable security company based in Table View, committed to providing exceptional alarm response services.About the Job:We are seeking an experienced Alarm Technician with a valid driver's license and PSIRA registration to join our team. The ideal candidate will have...

  • Senior Information Security Specialist

    1 month ago

    Cape Town, Western Cape, South Africa Dimension Data Full time

    About the RoleDemonstrate your expertise as a Senior Information Security Specialist at Dimension Data, where you will be responsible for performing network penetration testing and implementing security solutions to protect our infrastructure.Key ResponsibilitiesDevelop and implement information security policies to ensure the protection of our networks and...

  • Cyber Security Specialist

    4 weeks ago

    Cape Town, Western Cape, South Africa Datafin IT Recruitment Full time

    **Job Overview**Datafin IT Recruitment is seeking an experienced Cyber Security Specialist - Systems Architect to join a dynamic Healthcare Service Provider. This role requires a strong passion for Information Governance and Cyber Security, with technical expertise in optimization, monitoring, and support of internal and client-facing Security &...

  • Senior Information Security Systems Analyst

    1 month ago

    Cape Town, Western Cape, South Africa Sanlam Full time

    Career OpportunitySantam is seeking a Senior Information Security Systems Analyst to join our Business Information and Technology Services (BITS) department.ResponsibilitiesConduct security analysis and monitoring to identify potential threats and vulnerabilities.Collaborate with the incident response team to investigate and respond to security...

  • Senior Business Information Security Officer

    1 month ago

    Cape Town, Western Cape, South Africa Sanlam Full time

    Career OpportunitySantam is seeking a talented Senior Business Information Security Officer to join our Business Information and Technology Services (BITS) department. This senior role will be based in our Western Cape or Gauteng offices.Key ResponsibilitiesEstablish and manage a Santam Business Unit (SBU) Information Security Programme.Develop and implement...

  • Business Information Security Officer

    3 months ago

    Cape Town, South Africa Sanlam Full time

    CAREER OPPORTUNITY Santam BITS has a career opportunity for a senior role of Business Information Security Officer (BISO) in the Business Information and Technology Services (BITS) department which will be based in the Western Cape or Gauteng. KEY RESPONSIBILITIES Establish and manage a Santam Business Unit (SBU) Information Security...

  • Senior Manager: Information

    6 months ago

    Cape Town, South Africa Believe Resourcing Full time

    Our Client: One of the leading universities in South Africa has an exciting vacancy for a Senior Manager in Information & Cyber Security. Taking advantage of expanding global networks and their distinct vantage point in Africa, they are committed, through innovative research and scholarship, to grapple with the key issues of our natural and social...

  • IT Auditor

    6 months ago

    Cape Town, South Africa Barrett's Recruitment Workhouse Full time

    **IT Auditor** **The Department**: the Internal Audit department is an independent, objective assurance and consulting activity designed to add value to improve operations. The department assists the company accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control and...