Senior ICT Internal Auditor Specialist at The National Student Financial Aid Scheme(NSFAS)

RESPONSIBILITIES: 

Policy, Systems & Procedure Implementation

• Implement all internal audit policies, governance documents, and the audit methodology documents.
• Prepare the Intention to Audit (ITA) document in accordance with Section 9 of the Audit Methodology
• Ensure that audits and internal audit assignments are executed in accordance with Section 10 of the Audit Methodology
• Employ professional standards relevant to the scope of work.
• Work collaboratively with business unit staff as a trusted partner operating independently and providing assurance with regards to the operations and control environment within business and use audit policies, systems, and procedures to implement audit execution across departments.
• Ensure that audits and internal audit assignments are executed in accordance with Section 10 of the Audit Methodology

Core Objectives Implementation

• Providing assurance with regard to the operations and control environment within the business.
• Support internal audit managers by effectively performing daily audit operations in accordance with section 9 and 10 of the audit methodologies.
• Draft and submit timeous audit issues with findings and recommendations.
• Implement audits in line with the Internal Audit Methodology specifically: scoping, problem statement/hypothesis wording, testing procedures, sampling and source data and testing results.
• Facilitate and support management to timeously close audit issues in their departments.
• Identify the extent of work needed to achieve the engagement’s objectives, including consideration of the relative complexity, materiality and significance of the matters concerned.
• Apply professional skepticism in the conduct of audits.
• Providing IT, data analytics and cyber expertise to the Internal Audit Team.
• Leading and delivering IT and cyber reviews across the organisation.
• Pair up with the other members of the IA team and enable their analytics needed – source the data, assist with building the analytic and support the interpretation thereof.
• Assist with IT audits across the division for areas not covered by ALICE (projects/ BCP/ DRP’s/ ITGC/ cyber reviews/ application controls etc.)
• Build visual tools/ dashboards to support our road to continuous auditing.
• Provide ongoing support to junior team members.

Performance Contracting

• Ensure individual performance contract is signed and reviews are done in line with policy.

Stakeholder Management & Relationships

• Build relationships with business process owners
• Daily liaison with clients.
• Effectively engage with clients throughout the audit process.
• Maintain institutional knowledge.
• Provide ongoing support to junior team members.

Project Facilitation & Implementation

• Plan and implement internal audit engagements to address identified needs as per the audit plan.
• Compile audit reports on completion of the audits to evaluate the control environment.

Budget optimisation

• Adhere to budgetary requirements pre audit assignment and annual plan.
• Perform budgeting and forecasting-related activities in relation to individual audit engagements and the overall annual plan.

Compliance Monitoring & Evaluation and sound reporting.

• Use of approved reporting templates and tools to make recommendations for improvements over time.
• Adhere to internal audit methodology and processes.
• Comply with the relevant professional standards during performance of individual duties and responsibilities.

Information & Knowledge Management

• Collaborate with stakeholders to build systems that enable the management of data obtained from different sources.
• Collaborate with stakeholders to use their experience, education and understanding to obtain knowledge from this information.

Reporting & Accountability

• Report on all audit findings and exceptions identified while testing.
• Ensure all exceptions are substantiated through sufficient evidence where possible.
• Produce clear, concise, and detailed audit reports

DESIRED SKILLS AND EXPERIENCE
Minimum requirements:

• NQF Level 7 in information systems, computer science, or related field.
• 3 - 5 years’ experience in a similar role as ICT Senior Auditor
• Computer literacy – Proficient – Computer literacy and competency beyond the intermediate level
• Driver’s License
• Intermediate project management skills
• Intermediate knowledge of the higher education sector
• Demonstrate an understanding of the IT audit methodology and its application.
• Intermediate to strong SQL scripting skills.
• Power BI experience/ other data analytic tools.
• Strong technical skills in information security management and related standards (ISO, NIST, etc)
• Knowledge of information technology general computer controls and application controls.

Preferred

• Bachelor’s degree in information systems, computer science, accounting, or related field.
• Other degrees/qualifications/ diplomas that would be advantageous or working towards
• CISA Certified Information Systems Auditor
• CISM Certified Information Security Manager
• CISSP- Certified Information Systems Security Professional OR;
• CISSP-ISSMP Information Systems Security Management Professional or other equivalents.
• 5 – 7 Years’ experience in a similar role as ICT Senior Auditor
• Intermediate project management skills
• Intermediate knowledge of the higher education sector
• IT Project auditing experience
• Cloud auditing experience