Internal Audit Manager

About the role

We are seeking an Internal Audit Manager to lead risk‑based IT audits across our infrastructure, cloud, cybersecurity, data, payments and digital channels. The role provides independent assurance over technology risks, strengthens the control environment and supports secure innovation at speed.

Key responsibilities

• Develop and maintain a risk‑based IT audit plan aligned with strategic objectives, risk appetite and the Three Lines Model.
• Perform technology risk assessments covering cloud services, cybersecurity, data & AI/ML, DevSecOps, third‑party risk, payments, open banking APIs and operational resilience.
• Lead end‑to‑end audits – scoping, fieldwork, issue validation and reporting – for IT General Controls, application controls, cybersecurity governance, cloud and platform engineering, data governance, payments and cards, and business continuity.
• Prepare Audit Committee packs, present audit opinions, key themes and trend analyses.
• Ensure compliance with IIA Standards, King IV principles, POPIA, ISO/IEC 27701 and PCI DSS requirements.

Required profile

• Adaptable problem‑solver with a strong questioning mindset.
• Commitment to doing what is right and delivering high‑quality service.
• Experience in auditing technology environments within a financial institution.

Required skills

• IT General Controls (ITGC) and application control testing.
• Cybersecurity governance, identity & access management, SOC, vulnerability and incident response.
• Cloud architecture (IaaS/PaaS/SaaS), shared‑responsibility models, Infrastructure as Code and container/Kubernetes security.
• Data governance, privacy (POPIA), data lineage, ISO/IEC 27701.
• Payments systems (EFT, RTGS, card acquiring/issuing) and PCI DSS scope.
• Business continuity planning, disaster recovery, RTO/RPO testing.