Chief Internal Auditor at University of Fort Hare

Minimum Requirements: 

• B. Comm Hons with Accounting/Internal Audit, MPhil in Internal Auditing or equivalent.
• CIA, CISA, CA(SA) and a Postgraduate Diploma in Risk & Compliance qualification are an advantage.
• A minimum of 10 years’ experience in Internal Audit.
• Experience in higher education or public sector organisations is advantageous.

Reporting administratively directly to the Vice-Chancellor and functionally to the Audit, Risk and Information Technology Committee, you will:

• Provide independent and objective assurance on the institution's governance, risk management and internal controls.
• Conduct both scheduled and unscheduled internal audits, providing actionable recommendations to senior leadership of the institution to enhance operations, mitigate risks, and strengthen overall performance.
• Possess a deep understanding of internal audit standards, principles and practices.
• Be equipped with proficiency of audit software, data analytic tools and Microsoft Office Suite.

KEY PERFORMANCE AREAS

KPA 1) Govern and Direct the Institution’s Internal Audit Division:

• Play a key role in shaping the overall strategic direction of the institution.
• Govern the implementation of policies & strategies agreed by Council / Senate.
• Promote the institution’s reputational profile through networks & partnerships.
• Provide oversight, leadership & guidance to units under area of responsibility.
• Establish a combined assurance framework in place.
• Play a key role in executive/governance committees.
• Direct the leadership resources as per structure.
• Monitor the achievement of the unit’s strategic plan achievement.

KPA 2) Medium to Long-term Conceptualisation and Vision:

• Formulate & review strategy aligned with vision & mission.
• Approve implementation of structures, resources & systems.
• Collaborates with senior stakeholders in strategy design.
• Conduct regular strategic alignment reviews.
• Provide regular feedback to senior stakeholders on plan implementation.

KPA 3) Strategic Financial Business Planning and Budgeting:

• Conduct long-term financial projections & planning.
• Allocate & re-allocate funds & resources based on portfolio needs & requirements.
• Approve financial strategies in conjunction with senior stakeholders / Board.
• Obtain approval for annual budgets from executive committee/Board.
• Exercise prudent budgetary control.
• Approve large payments, assets procurement & services.
• Monitor cash flow management.
• Report on financial & budgetary objectives/plans.

KPA 4) Organisational Leadership Management:

• Plan leadership talent, succession and development based on strategy.
• Direct preventative & mitigation strategies for anticipated talent risks.
• Recruit, select & appoint a leadership team based on the approved Resource Plan.
• Build & direct the leadership team within the portfolio structure.
• Manage performance management aligned with the Performance Management System.
• Direct talent competence, skills & performance levels aligned with strategy.
• Submit a succession & development plan progress reports to senior leadership.

KPA 5) Strategic Relationship Development:

• Participate in key institutional policy and decision-making bodies.
• Develop & foster partnerships with local & international academic institutions.
• Engage with industry/government stakeholders aligned with business area.
• Participate in related industry forums.

KPA 6) Organisational Internal Audit Leadership and Advice:

• Influence the institution's internal audit strategy & policy.
• Provide strategic internal audit direction in the strategic planning process.
• Establish frameworks for combined assurance.
• Provide direction on the ICT Audit strategy.
• Remain abreast of latest developments in internal audit legislation.
• Direct Internal Audit Charter & gain approval from senior leadership.
• Approve the Internal Audit Plan (in consultation with executive members).
• Approve risk based annual internal audit program, budget & performance criteria.
• Approve the facilitation of the fraud prevention & corruption awareness program.
• Direct internal audit policies & procedures aligned to business objectives.

Approve the:

• ICT Audit Charter & obtain approval,
• Risk based annual ICT audit program, budget & performance criteria,
• Audit reports for each engagement within annual ICT audit plan.
• Internal audit schedules & confirm the achievement of program outcomes.
• Consider audit reports for each engagement within annual internal audit plan.

Govern the following:

• Internal audit process improvements to ensure that value-adding services are in place,
• Assurance on information management controls.
• Assurance of the control environment.
• Internal audits and processes.
• Consider audit reports for each engagement within annual internal audit plan.
• Build business relationships with senior internal resources.
• Advise mitigation plans to the executive leadership.
• Advise on security policies, procedures & incident response plans.
• Direct ICT governance practices, security controls & risk management process.
• Govern & direct the cybersecurity assessments process & outcomes.
• Monitor outputs of the quality control function for Internal Audit.
• Monitor quality updates of business process models with commensurate controls.
• Track and monitor the implementation and compliance with the Internal Audit Charter.
• Monitor the effectiveness of the internal audit function & suggests improvements.
• Report results of audit assignments to the executive committee.
• Recommend initiatives to the Audit Committee on key decisions required.
• Report results of ICT audit assignments to senior leadership.
• Present recommendations, investigations & ad hoc ICT Audit reports.

KPA 7) Corporate Risk Assurance:

• Remain abreast of corporate strategy/direction/business models and Governance Frameworks (e.g. King IV).
• Provides input into the Corporate Risk Strategy.
• Remains abreast of legislation & jurisdictions and the changes within.
• Assume responsibility for all aspects of the corporate disaster continuity plan.
• Evaluate risk processes.
• Draft & evaluate a leadership succession strategy.
• Remains abreast of industry drivers/risks/trends.
• Disseminate & inform leadership on the risk strategy plus operational plans.
• Manage the relationship between the institution & various regulators.
• Collaborate and provide input to compliance projects.
• Drive the implementation of new requirements such as legal, organisational etc.
• Plan & direct risk audits.
• Monitor maintenance & updates on the Risk Register.
• Propose & obtain approval from governance structures for corrective action.
• Monitor compliance to Risk Policy.

Closing Date: 01 February 2025