Senior IT Auditor Manager

Strategic Responsibilities

• Assist Audit Management in responding to management and stakeholder queries.
• Build and maintain effective working relationships with companies and other assurance providers, including:
  • The company Invest, Life, Corporate and Employee Benefits, Insure, Health, International Group.
  • External Audit and other Assurance Providers
• Facilitate the maintenance of IT risk profiles, including both inherent and residual risk views.
• Challenge risk management information received from the business by value-add input on opportunities to strengthen IT risk management processes and controls.

Technical Competence

Demonstrates strong technical knowledge and practical application in the following areas (refer to "Essential Knowledge & Experience" section below for minimum years of experience in the above areas):

• IT General Controls (“ITGC”) reviews
• Application control reviews
• Data governance and IT governance frameworks
• IT infrastructure and technical environments, including databases and operating systems
• Cybersecurity and information security
• Computer Assisted Audit Techniques (“CAATs”) and data analytics
• Keeps abreast of emerging technology, cyber risks, and industry trends and actively contributes to the enhancement of audit methodology and audit approaches

Operational Responsibilities

Audit Planning and Risk Assessment

• Ensure audits are planned and performed in accordance with the approved Internal Audit Methodology.
• Obtain input from Audit Management regarding key risks associated with each audit topic.
• Ensure all significant risks are appropriately addressed for each audit engagement.
• Liaise with Group Risk, Compliance, and Forensics to identify issues impacting audit scope or execution.
• Define the purpose, scope, and audit approach for assigned audits.
• Draft engagement letters for Management review.
• Assist Audit Management in determining the scope of IT Audit assignments.
• Prepare engagement letters for review and approval by Audit Management.
• Prepare and/or review Audit Planning Memoranda (“APMs”).

Audit Execution and Documentation

• Prepare and/or review system descriptions, walkthroughs, and process flow diagrams, raising review notes where required.
• Prepare and/or review Risk and Control Matrices (“RACMs”) and address review notes.
• Prepare and/or review audit test procedures and obtain approval for any changes to RACMs, testing procedures, or sample sizes.
• Perform audit testing and document working papers using approved Audit Software.
• Review working papers prepared by IT Auditors and raise review notes as appropriate.

Reporting Responsibilities

• Draft audit reports for Management review.
• Review draft audit findings and observations.
• Forward draft observations to business stakeholders for comment and management responses.
• Prepare executive summaries, including overall audit opinions/ratings and management commentary.
• Perform ad‑hoc reporting as required by Audit Management.

Audit Finalisation

• Prepare and/or review the Audit Finalisation Checklist at the conclusion of audits.
• Provide continuous feedback to Audit Management throughout planning, execution, and reporting phases.
• Maintain ultimate accountability for the quality, completeness, and accuracy of audit files.

Supervision, Quality, and Delivery

• Provide close day‑to‑day supervision of IT Auditors and auditors’ work progress.
• Monitor the quality of audit work and implement corrective action where required.
• Provide on‑the‑job training, coaching, and supervision to ensure audit objectives are met and adequate coverage is achieved.
• Provide regular (at least weekly) progress updates to Audit Management.
• Track audit budgets and timesheets weekly and submit to Audit Management.
• Escalate risks, delays, or challenges timeously where deadlines may not be achieved or feedback is outstanding.
• Immediately advise Audit Management of any significant audit issues or impediments.
• Proactively take on additional responsibilities as requested by the Audit Manager.
• Provide meaningful input and monitor the effective and timely implementation of management actions addressing control weaknesses identified through audits, risk events, risk profiling, and Control Self‑Assessments (“CSAs”).

Follow‑Up Responsibilities

• Follow up on outstanding audit findings and management action plans.
• Prepare and submit follow‑up progress reports for Risk Committees and Audit Committees where required.

People Management Responsibilities

• Drive self‑development through studying, attending training courses, and professional chapter meetings.
• Complete mini‑appraisals and performance feedback processes as required.
• Manage day‑to‑day activities of assigned audit staff, consultants, and contractors.
• Support the development of audit staff to enhance competence, capacity, and delivery of the department.
• Monitor staff productivity through timesheets and cost recovery processes.
• Review feedback received from management on auditor performance.
• Prepare and provide performance feedback and appraisal input for IT Auditors across assigned audits.

General Responsibilities

• Stay up to date with developments in the Internal Audit profession and relevant industries.
• Contribute to the ongoing development and enhancement of audit methodology.
• Travel when required to support audit engagements