Internal IT Auditor

About the role

Requirements

• DUTIES AND RESPONSIBILITIES:
• - Risk Assessment & Testing: Evaluate the design and operational effectiveness of IT security, networks, and software applications.
• - Compliance Monitoring: Ensure IT systems meet internal policies and external regulations (SOX, HIPAA, GDPR)
• - Security Evaluation: Identify vulnerabilities and weaknesses, including analyzing firewalls and access controls.
• - Reporting & Remediation: Document findings, prepare detailed audit reports, and provide recommendations to management for strengthening internal controls.
• -Process Improvement: Review IT policies and procedures to improve efficiency and security.
• -Conduct special assignment as may be assigned by the Chief Audit Executive
• QUALIFICATIONS:
• · Bachelor’s degree in Information Technology, Computer Science.
• · Certified Information Systems Auditor (CISA) is highly preferred.
• PROFESSIONAL EXPERIENCE:
• - Two to three years IT audit experience in a relevant sector.
• - Understanding of ITGC (IT General Controls), cybersecurity frameworks (e.g., NIST, ISO 27001), and operating systems.
• - Excellent knowledge of Firewalls, VPNs, ERP systems (e.g. Oracle), and data analysis tools.
• - Excellent knowledge of IT Framework like COBIT, NIST, ITIL.
• - Excellent written and oral communication skills.

Responsibilities

• DUTIES AND RESPONSIBILITIES:
• - Risk Assessment & Testing: Evaluate the design and operational effectiveness of IT security, networks, and software applications.
• - Compliance Monitoring: Ensure IT systems meet internal policies and external regulations (SOX, HIPAA, GDPR)
• - Security Evaluation: Identify vulnerabilities and weaknesses, including analyzing firewalls and access controls.
• - Reporting & Remediation: Document findings, prepare detailed audit reports, and provide recommendations to management for strengthening internal controls.
• -Process Improvement: Review IT policies and procedures to improve efficiency and security.
• -Conduct special assignment as may be assigned by the Chief Audit Executive

Skills

• IT audit
• IT General Controls (ITGC)
• cybersecurity frameworks (NIST, ISO 27001)
• firewalls
• VPNs
• ERP systems (Oracle)
• data analysis tools
• risk assessment
• compliance monitoring (SOX, HIPAA, GDPR)
• security evaluation
• reporting and remediation
• COBIT
• ITIL
• information technology