Job summary
Senior IT Auditor
Seeking a experienced Senior IT Auditor with a strong background in Cybersecurity audits. The ideal candidate will possess extensive experience in assessing and enhancing IT security controls & conducting risk based audits.
Responsibilities
- Understanding engagement objectives and assisting the engagement manager in preparing the plan and testing procedures to meet the review objectives.
- Gaining detailed understanding of relevant IT and business processes systems and controls. Leading performance of risk assessments and controls evaluations. Identification of areas for leveraging data analytics.
- Performing engagements in accordance with the planned scope/ risk areas aligned with budget expectations. Assists in tracking and reporting project status and milestones.
- Adhering to Corporate Audit Methodology and documentation requirements at all times.
- Supervising executives / junior executives in the team driving their accountability and timely execution of each engagement. Pro-actively guide and ensure knowledge sharing within team.
- Ensuring work papers documentation to ensure the retained documentation supports the audit work performed.
- Assisting in the assessment of identified gaps and areas for improvement and evaluating their significance and potential business impact. Propose remediation steps that are practical and reasonable.
- Driving discussions/agreements on detailed audit findings with the audit team and management prior to final report issuance to ensure clear understanding and consideration about the noted issues and the related actions to be implemented.
- Preparing audit reports/memos highlighting key risk exposures noted issues assist in overall conclusion and agreed upon corrective actions.
- Following up with process owners for timely implementation of MAPs and escalating if required.
- Building good working relations with key stakeholders Ensuring timely and accurate time tracking
- Continuously focus on self-development by attending trainings seminars and acquiring relevant certifications.
Certifications Required
CISA CISSP CISM