Specialist, Internal Audit at AngloGold Ashanti

ABOUT THE ROLE 

• Group Internal Audit (GIA) is charged to provide adequate independent assurance to the Board (through the Audit and Risk Committee) and Exco that the company’s governance requirements are met, the internal controls are adequate and effective, and that risks are adequately managed.  More specific to the role, the Specialist - IT Internal Audit is responsible for performing IT audits through the Combined Assurance model as well as SOX ITGC audits, Cyber Security and Operational Technology (OT) audits. 

WORK ACCOUNTABILITIES 

Safety

• Place people first and correspondingly put the highest priority on safe practices and systems of work.

Performance

• Perform IT and OT Audits for all Combined Assurance locations throughout the year.
• Perform SOX ITGC testing during interim and roll-forward testing.
• Perform Cyber Security audits throughout the year.
• Perform Project Assurance audits for new system implementations.
• Prepare documentation for the quarterly IT GRC Committee meeting.
• Maintain working relationship with the IT External Auditors.
• Quality deliverables. Working papers and reports adhering to GIA requirements and standards.
• Timely deliverables according to audit project deadlines and project budgeted hours.

Customers

• Provide a quality and value adding service, whilst maintaining sound professional relationships with clients.
• Establish and build client relations with allocated function heads.

Audit Process and Productivity (where applicable):

• Complete scheduled audit coverage plan

Learning and Growth

• Effectively manage and execute own development plan and those of subordinates. (Drive increased professionalism and proficiency).

People Accountabilities

• Value people’s unique contribution that they make and or can make to our business success.

Stakeholder Accountabilities: 

• Be honest with yourself and others and deal ethically with all of our business and social partners.

Compliance/Governance Accountabilities:

• Apply/ adhere to organisational procedures and legislative requirements.
• Knowledge & application of ethical conduct and compliance with corporate governance, principles and social responsibility.

EDUCATION & QUALIFICATION

• B.Sc. Computer Science or Information Technology or equivalent degree/diploma.
• Certified Information Systems Auditor (CISA) through the Information Systems Audit and Control Association (ISACA).
• At least 5-7 years’ experience and working knowledge in the following areas:
• IT Auditing of infrastructure and applications
• Cyber Security audits
• SOX IT General Controls testing
• Operational Technology auditing being a notable advantage
• Relevant technical knowledge of the IT environment
• General awareness of fraud indicators
• Awareness of IT Governance frameworks
• Basic risk management awareness
• Experience in the mining industry would be a notable advantage