IT Internal Auditor

About the role

The IT Internal Auditor will evaluate, monitor and improve the effectiveness of the organisation's information systems, technology controls and security processes, ensuring alignment with business objectives and regulatory requirements.

Key responsibilities

• Oversee internal IT audits across the group, assessing inherent and residual IT risks.
• Challenge risk‑management information and provide recommendations to improve IT risk processes and controls.
• Plan, execute and report audits in line with the group audit methodology, preparing audit memoranda, risk‑control matrices and test procedures.
• Supervise IT auditors, review working papers, and ensure audit quality and timely completion.
• Follow up on audit findings, monitor implementation of corrective actions and report progress to risk and audit committees.

Required profile

• Degree in Computer Science, Information Systems, Auditing or related field.
• Relevant certification (CIA, CISA, CISM, CRISC or CGIT) – at least one required.
• Minimum 2 years of experience in IT audit, including IT General Control and Application Control reviews.
• Strong analytical thinking and communication skills.

Required skills

• IT General Controls and Application Controls.
• Technical infrastructure assessment and project/programme management.
• Cybersecurity and information security principles.
• Data analytics and Computer Assisted Auditing Techniques (CAATs).
• Knowledge of COSO risk‑management framework and internal control standards.