INTERNAL AUDITOR - INFORMATION SYSTEM (IS) AUDIT UNIT, GROUP CONTROL ASSURANCE SERVICES

Responsibilities;

1. Provide independent, objective assurance and consultative activities designed to add value, safeguard organization’s asset, minimize risk exposure in computerized environment and minimize the opportunities for error and fraud.
2. Assist IS Audit Manager and Head of Group Audit Division in developing/ maintenance of appropriate audit policies and procedures to ensure proper and comprehensive performance of IS audit activities.
3. Perform IS audit assignments on a timely basis in accordance with the established scope, approach, methodology and techniques to achieve desired audit objectives.
4. Supervise the execution of the planned IS audit assignments and ensure that all assignments within department complie with the division’s standard, regulatory guidelines and other applicable professional requirements.
5. Provide the necessary professional assistance to ensure that the objectives and functions of the audit division are achieved.
6. Involve in computerization project where necessary and keep IS Audit Manager and Head of Group Audit Division informed of the progress of the project.
7. Perform other assignments as and when required by IS Audit Manager or Head of Group Audit Division.

Requirements;

1. Degree in Computer Science, Computer Engineering, or other professional IT qualification, preferably with a professional certification such as CIA, CISA, CISSP, CISM.
2. The candidate should have at least 5 years of IT audit experience, having performed the following:

Information security audits of:

• AS/400
• Unix
• WinXP
• Networks (LAN/WAN, TCP/IP, VPN as well as network architecture design, firewall, routers)
• Database management system (such as Oracle)
• IT operations, data centre and DRP/BCP reviews
• IT project management/Systems Development Life Cycle and systems change reviews
• supporting the business auditors in integrated audit and knowledge of ACL/IDEA Audit Software is required
• Familiar with IT security, control and audit frameworks (e.g. COBIT) and Risk Management or InfoSec Audit
• Proficient in collecting and analyzing complex data, evaluating information and systems, and drawing logical conclusions
• Good team player, able to maintain the professionalism, respect of the team and the stakeholders
• Able to communicate with Senior Management confidently
• Excellent verbal and written communication skills