Digital Trust: IT Audit Manager at PwC South Africa

As a Manager, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:

• Develop new skills outside of comfort zone.
• Act to resolve issues which prevent the team working effectively.
• Coach others, recognise their strengths, and encourage them to take ownership of their personal development.
• Analyse complex ideas or proposals and build a range of meaningful recommendations.
• Use multiple sources of information including broader stakeholder views to develop solutions and recommendations.
• Address sub-standard work or work that does not meet firm's/client's expectations.
• Use data and insights to inform conclusions and support decision-making.
• Develop a point of view on key global trends, and how they impact clients.
• Manage a variety of viewpoints to build consensus and create positive outcomes for all parties.
• Simplify complex messages, highlighting and summarising key points.
• Uphold the firm's code of ethics and business conduct.

PRINCIPAL ACCOUNTABILITIES

The successful candidate will be responsible for:

• Supporting the Senior Manager, Director or Partner in delivery of services to clients on IT audit engagements.
• Management and delivery of client engagements within financial services.  This will include managing the full project life cycles. This includes planning and execution of IT audit engagements through the development of audit scope, risk and controls matrices and testing strategies per engagement, as well as reporting and socialising outcomes with and reporting to senior management.
• Management of sales process and practice development. This will include developing and managing responses to requests for proposals and developing business acumen and industry knowledge of client environments.
• Lead and coach team members in the performance of IT audits and reviews of systems, applications and IT processes. 
• Utilise data assurance and analytical techniques to analyse data to improve audit efficiency and effectiveness
• Deep understanding and experience with managing IT risks and controls, i.e. use technical and industry knowledge to identify technology, process and data risks
• Develop and manage a risk-based plan for each engagement, including the scope, objectives, and timing
• Evaluate significant risks and weaknesses relating to the IT control processes and make appropriate recommendations for improvement
• Managing audits of various IT general controls and security aspects including:
• Risk based IT audits (e.g. IT projects, application systems, general IT controls, CAATS, IT Security, databases, operating systems and technology platforms
• Pre and post- implementation reviews of system implementations or enhancements. 
• IT security audits (e.g. network, operating system and data center), including evaluating if security vulnerabilities are properly identified and mitigated. 
• IT  general computer controls 
• IT management policies and procedures such as change management, business continuity planning/ disaster recovery and information security
• Formulation of findings and action plans to management, by means of written reports
• Travel may be required on an ad-hoc basis

MINIMUM QUALIFICATIONS

• Bachelor’s degree in accounting, business, information technology, computer science or other relevant discipline
• Prior position in IT Audit – internal audit or external auditing firm.
• Additional Desirable Qualifications:
• Certified Information Systems Auditor (CISA)
• CA (SA)
• CIA
• CISM, CDPSE or other similar qualifications
• Cloud certifications

EXPERIENCE

•  Minimum 8 years financial services experience (Insurance, Asset Management, Banking)
• Minimum 4 years experience in leading teams and managing IT General Controls review assignments.
• Experience in managing complex IT audit engagements  (IT general controls, automated application controls and data analytics) within financial services for the full project life cycle from planning through to reporting and socialising outcomes with senior management/ C-suite.
• Experience in managing and performing third party assurance engagements will be advantageous.
•  Proven business development skills. 
• Experience in managing project governance assurance projects on major system development programmes will be advantageous.
• Experience in auditing Robotic Process Automation (RPA) and AI will be advantageous.
• Experience with multiple technology domains including aspects of Windows, Unix and/or database administration, software development and networking. 

KEY KNOWLEDGE & SKILLS

Technical knowledge

• Proficient in the use of Microsoft spreadsheets, Word and Powerpoint or Google sheets, Docs and Slides
• Excellent understanding of the COBIT framework and general controls found in IT operations and processes.
• Working knowledge of project management frameworks such as Waterfall, PRINCE2, and Scrum.
• Working knowledge of information security protocols and principles (NIST, ISO27001, PCI-DSS, etc).
• Understanding of emerging technologies, such as cloud, RPA and AI
• Ability to acquire digital skills and self upskil in areas such as data analytics and data visualisation using firm provided tools. 
• Understanding of ERP systems and other peripheral business systems.