IT Controls Tester: Internal Controls at The South African Breweries (SAB)

Key Purpose Statement 

The IT Controls Tester: Internal Controls is overall accountable for assisting the IT Controls Lead with establishing and maintaining a strong control environment within the Zone.   Key responsibilities are MICS, SODs and Policy compliance as well as SOX certification (if in-scope). He/she reports to the IT Lead: Internal Controls.

Competence Requirements

Education

• Bachelors Degree or equivalent is a requirement; and
• ITIL Foundation or equivalent will be beneficial

Experience

• Between 3 to 5 years relevant IT experience;
• Understanding of the principles and application of good corporate governance and IT Internal controls, with specific knowledge of the Zone corporate governance environment;
• In-depth understanding and hands-on experience of Sarbanes Oxley Act, IT Internal Audit or governance role with focus on IT Controls reporting;

Technical Knowledge

• Computer literate with a good understanding of the utilisation of Microsoft Office;
• Exposure to Sarbanes Oxley Act technology tools i.e. SAP GRC would be advantageous;
• Good understanding control design of audit testing principles; and
• Good understanding of the SAP environments including IT governance frameworks

Output and Accountabilities

• Assisting with implementation of IT Internal Control in all entities/locations in Zone by liaising with the different functions;
• Assisting the IT Internal Controls Lead to ensure that the IT processes defined with the control owners are correctly translated for the Zone, embedding the proper IT internal controls;
• Tracking and monitoring of implementation/compliance progress within the Zone;
• Engage with control owners to define action plans to close gaps and increase compliance, communicates with all involved functions;
• Ensure SOX and MICS compliance by interacting with control owners (Solutions, Internal Controls and other departments);
• Assisting the IT Internal Controls Lead with updating and maintaining of MICS with any changes to risks, controls (including local design), control owners and other control details based on process changes in the Zone, IT Internal Control and any other requirements;
• Accountable for ensuring that scoping, design and testing is performed adequately as per the defined IT Internal Controls standards including Monthly review of Self assessments, Quarterly assessments; Operational efficiency cycle testing and year end testing.
• Maintain the assignment of control design and testing and completion of working papers and test results including details of any deficiencies raised;
• Any deficiencies are communicated and closed as soon as possible by agreeing and implementing sustainable actions in conjunction with management in the different functions;
• Assisting the IT Internal Control Lead to ensure timely and accurate issuing and reporting of the self-assessments to BU/Zone IC (MICS, Policies) and local management within the different functions;
• Assisting the IT Internal controls Lead with requests from local External Auditors to ensure alignment on timelines regarding scoping, progress, reporting of results, etc.;
• Local travel (within Africa) maybe required – estimated at 40% at a maximum