Senior Internal Auditor: IT & Cyber Security (Sandton) at Sun International

Description

• The Senior Internal Auditor: IT & Cyber Security is responsible for leading risk-based assurance across the Group’s technology and cyber environments.
• The role owns and delivers the annual Internal Audit plan for the IT, Cyber Security and SunBet IT portfolio, assessing technology governance, cyber security, cloud environments, digital platforms, system implementations and information systems controls.
• It provides independent assurance on the effectiveness of risk management and controls, identifies emerging technology risks, and partners with key stakeholders to strengthen governance, security and control practices across the business.

Core behavioural & Technical / proficiency competencies:

Behavioural

• Continuous Improvement
• Integrity
• Teamwork
• Collaboration
• Transparency
• Adaptability
• Problem-Solving
• Customer Centricity
• Lifelong Learning
• Respect for Diversity

Technical

• IT Audit & Assurance
• Cyber Security & Risk Management
• IT Audit Methodologies – COBIT & ISO 27001
• Cyber Security Frameworks – NIST & CIS Controls
• Network Security & Architecture
• Cloud Security – AWS, Azure & GCP
• Technology Governance
• System & Digital Platform Assurance
• Data Protection & Regulatory Compliance
• Data Analysis & Audit Tools – ACL & SQL
• Risk Management
• Technical Report Writing
• Audit Planning & Control Testing
• Technology Risk Assessment
• Stakeholder Management & Influence

Requirements

Qualifications 

• Bachelor’s Degree in Information Technology, Computer Science or a related field.
• Certified Information Systems Auditor (CISA) and Certified Internal Auditor (CIA) – required.
• Postgraduate qualification in Information Systems, Cyber Security, Auditing or Risk Management advantageous.
• CISM, CISSP and/or CRISC advantageous.

Experience:

• 8–10 years’ experience in IT Audit and Cyber Security Assurance.
• Strong experience auditing cloud environments, technology governance and cyber security control frameworks.
• Proven experience evaluating system implementations, access controls and data protection processes.
• Exposure to online gaming, digital platforms or complex regulated IT environments advantageous.