Senior Manager - IT Audit at PwC South Africa

JOB PURPOSE

• The candidate will need to have IT Auditing experience to manage business process/application and IT General Controls to manage teams to deliver on IT audit work on  external audit and Internal Audit Projects. 
• The Senior Manager will need to be a candidate that is adaptable to change and continuously develop their skill set and industry expertise. The SM will be required to work with resources xLOS and build a network within the firm to effectively service clients as a number of service lines may be involved.

JOB PROFILE

PRINCIPAL ACCOUNTABILITIES

Role Description

• Fulfilling the SM role within the Risk Services business and servicing existing and new clients
• Building and maintaining relationships with key client staff
• Pursuing new opportunities and actively drive new proposals within the team
• Support the engagement leader by assisting with proposals, internal industry meetings, driving actions across all service lines
• Dealing appropriately with risk management issues
• Supervise engagement teams and providing support to managers and lower level staff
• Ensuring there is a pipeline of staff to service client needs
• Be involved with the development of managers and staff

PRINCIPAL ACCOUNTABILITIES

The individual will take responsibility for:

The candidate should have been responsible for ICT Internal Audit, External Audit and Risk Assurance assignments responsible as Senior Manager IT or Internal Controls audits. Including:

• Performing risk management activities on engagements to ensure PwC is not exposed to risk.
• Upskilling team members with a specific focus on African, Coloured and Indians to support the firm’s BEE strategy.
• Evaluating processes and methods used in existing Information Technology Systems inclusive of IT General Controls and business process controls, when transactions are processed, inclusive of system security, change control and system operations and propose solutions to strengthen the systems controls to ensure the risk of loss of integrity of organisations’ systems and data is mitigated and business risk is managed The outcome of this is typically an audit report with findings and recommendations on IT internal controls weaknesses that can be issued to clients. 
• Review of automated controls and IT General controls in ERP’s e.g SAP.. This is performed by obtaining an understanding of how the information system functions by reviewing the flow of information, reviewing key controls and resulting output. Recommendations are communicated by means of client interaction and or written reports.
• The focus typically is internal controls design and effectiveness of manual and automated controls to enable their improvement by identifying gaps and proposing solutions that management should implement in order to mitigate risks that could result in unauthorised access to their systems as a result of cyber risk.
• Preparing audit plans and the team on how to go about gathering evidence through interviews and validation of client evidence presented. 
• Demonstrating understanding of the PwC audit and risk management process for documenting work and findings as well as following up on review notes and assisting with the clearance of findings including report writing.
• Completing and negotiating budgets and dealing with the client economics ensuring engagements are completed as efficiently as possible.
• Building relationships with clients whilst demonstrating understanding of the value PwC can offer to existing and potential clients.
• Understanding Risk Assurance services and Broader Assurance Services (demonstrating understanding of the firm’s service offerings).

PERSON PROFILE

MINIMUM QUALIFICATIONS 

EXPERIENCE

KEY KNOWLEDGE & SKILLS

Bachelor degree (Information Systems, Engineering, Internal Audit, Accounting). CA(SA) or CISA would be recommended but is not mandatory.

• Minimum of 6-8 years of relevant professional experience in a big 4 firm in the fields of IT Auditing 
• Professional services background preferable
• ITGC reviews
• Application control reviews
• ERP Security and Controls (e.g. SAP)
• Project Assurance
• Data Analysis