Internal Auditor: IT Audit at Public Protector South Africa

Technical and Behavioural Competencies:    

• Planning, organising and coordinating.
• Personal mastery.
• Judgment and decision making.
• Ethics and values.
• Client service orientation.
• IT General Controls Reviews and Application Controls Review is essential Data analytics.
• Report writing and presentation skills.
• Data analytics experience is essential.
• SAP auditing experience will be an advantage.
• Network security/ vulnerable testing experience will be an advantage.
• Experience using Teammate to document audit work will be an advantage.
• Knowledge of IT Audit frameworks (for e.g. COBIT, ITIL, ISO2700 etc.)
• Knowledge of International Standards for the Professional Practice of Internal Auditing.
• Computer literate (Microsoft Office: Excel, Word and PowerPoint.

Qualifications and Experience: 

• Bachelor's Degree/ Advanced Diploma in Auditing/ Information Technology/
• Certifications such as CISA/ CGEIT/ CRISC or CISM will be an added advantage. SAP qualifications or certifications will be an added advantage.
• Certification in Data analytics would be advantageous.
• ISACA or IIA membership would be advantageous.
• Relevant 4 years' IT auditing experience including IT General Controls Reviews and Application Controls Review.
• IT auditing experience gained in a Large Company and/or auditing or advisory firm with a similar size to PPSA will be advantageous.

Attributes:

• Transparency
• Accountability
• Courtesy
• Team player
• Integrity

Audit Management

• Develop Audit Plan.
• Prepare the notification letter to be sent to the client in accordance with the approved annual audit plan.
• Conduct preliminary survey on the area or processes to be audited.
• Prepare the Audit Planning Memorandum for the audit.
• Prepare process flows and system descriptions.
• Prepare Risk and Controls Matrix and perform and evaluate the adequacy of controls.
• Prepare the audit program based on the outcome of the preliminary survey.
• Timely submission of planning documents to IT Audit Manager for review.
• Conduct introductory meetings with the auditee to discuss the area to be audited.
• Prepare audit file and cross-reference all working papers to audit evidence in accordance with the Quality Assurance standards.
• Taking inputs from Seniors/Supervisors and appropriately and accurately applying comments and/ or feedback.
• Prepare Quality audit file that comply with the IIA standards and Audit department methodology.
• Provide assurance and recommend controls in accordance with the relevant laws and regulations and National Treasury frameworks.

Conduct Audits

• Conduct audits as per the audit program and provide reasonable assurance regarding the effectiveness of controls.
• Document working papers and cross-reference all the working papers in accordance with the Quality Assurance standards.
• Download data from the system being audited and perform data analysis using auditing software such as ACL.
• Draft audit findings substantiated by valid audit evidence, identify root causes and provide practical recommendations.
• Discuss findings with auditee during the course of the audit to ensure the accuracy of the findings.
• Timely submission of draft audit findings to IT Audit Manager.
• Address and respond to IT Audit Manager's review notes.
• Conduct follow-up on previous audit findings.

 Reporting

• Draft audit report with findings and substantiated by valid audit evidence, identify root causes and provide practical recommendations.
• Attend to Audit Manager's review notes.
• Obtain management comments and action plans.
• Conduct exit meeting with the auditee and prepare minutes of the meeting.
• Identifying and reporting on standard criteria, making reference to applicable Acts, regulations and policies that might have been contravened.
• Aid in the development of functional reporting systems, for management, project or performance reporting.
• Report regularly and periodically perform necessary submissions as and when required to provide progress updates and/or inform management decisions.

Stakeholder Management

• Aid in proactive and progressive relationships with key stakeholders.
• Deal with inquiries and requests for information from both internal and external stakeholders.
• Aid in the maintenance of relationships with vendors, service providers or procurement teams and ensure that all relevant procured items are invoiced and paid on time