Internal Audit Lead at Robert Walters

• A prestigious global private markets manager is seeking an accomplished Internal Audit Lead to join their Cape Town office, focusing on technology and data assurance.

What you'll do:

As an Internal Audit Lead, you will play a central role in shaping the organisation’s approach to technology risk assurance. Your day-to-day activities

• Lead end-to-end IT and technology audits within the approved Internal Audit Plan, covering areas like IT general controls, application controls, cybersecurity, data governance, cloud infrastructure, and third-party providers.
• Assist the Head of Internal Audit in scoping IT reviews to ensure technical accuracy and business relevance aligned with the organisation’s risk profile.
• Audit compliance with technology and data regulations such as DORA, GDPR, operational resilience standards, and other frameworks.
• Test IT system controls for access management, change management, incident handling, business continuity, and disaster recovery.
• Review data integrity, lineage, and management practices across systems to ensure accuracy and reliability.
• Deliver clear audit reports that outline findings and agreed actions for both technical and non-technical audiences.
• Support IT risk assessments and help shape the annual risk-based Internal Audit Plan with a focus on emerging risks like cyber threats and new technologies.
• Monitor changes in technology, regulations, and vendor risks to identify potential issues.
• Prepare management information (MI) for senior forums like Executive Committees or Boards on audit results, risks, and remediation progress.
• Build strong relationships with internal teams and external auditors; provide guidance on IT controls while ensuring coordinated audit coverage.

What you bring:

To excel as an Internal Audit Lead, your background should include

• 8–10 years of IT audit or technology risk experience in financial services or investment management is required.
• Professional certifications such as CISA, CISSP, CISM, CIA, ACA, or ACCA are mandatory; multiple certifications are highly value
• Strong expertise in IT general controls (ITGC) frameworks and hands-on experience with application control testing using methodologies like COBIT or ISO 27001
• Proven ability to audit cybersecurity controls, including vulnerability management, penetration testing, identity/access management, and security operations
• Experience auditing cloud platforms (AWS, Azure, GCP), SaaS solutions, or third-party providers in large organisations
• Solid understanding of UK/EU regulations for asset managers (e.g., DORA, GDPR) and experience assessing compliance
• Expertise in auditing data governance frameworks, including integrity checks, lineage tracing, and broader data management reviews
• Ability to develop technology-focused Internal Audit Plans and conduct IT risk assessments within complex international structures
• Practical knowledge of end-to-end IT audit processes, from planning to reporting, and experience tracking remediation actions with stakeholders
• Exceptional written and verbal communication skills for creating clear reports tailored to technical and non-technical audiences while fostering cross-functional relationships.