Independent Senior IT Auditor (2 positions) – Remote/Hybrid

About the role

Our client is seeking two experienced Independent Senior IT Auditors to support public‑sector engagements in Gauteng. The role is offered on a contract basis with a hybrid/remote work model, focusing on government departments, municipalities and state‑owned entities.

Key responsibilities

• Design and execute risk‑based IT audit engagements aligned with PFMA, MFMA and Treasury Regulations.
• Assess IT General Controls, application controls, change management, user access management and overall IT operations.
• Audit compliance with the Governance of ICT Framework (CGICT), COBIT and the King IV Report.
• Evaluate cybersecurity posture, data governance and POPIA compliance.
• Prepare clear audit reports, root‑cause analyses and actionable recommendations for accounting officers, audit committees and AGSA liaison teams.

Required profile

• Valid CISA or CISM certification in good standing.
• 5–7 years of hands‑on IT auditing experience, including at least 3 years in the South African public sector.
• Deep knowledge of PFMA, MFMA, Public Audit Act and National Treasury guidelines.
• Proven ability to work independently, meet statutory deadlines and communicate with senior government stakeholders.

Required skills

• IT General Controls (ITGC)
• Application controls
• Change management
• User access management
• IT operations
• COBIT framework
• King IV governance
• CGICT framework
• PFMA compliance
• MFMA compliance
• POP​IA data protection

What we offer

• Negotiable remuneration package