IT Auditor

Main Duties

• Conduct IT risk assessments to identify and evaluate key IT-related risks.
  
  
• Participate in the creation and elaboration of the yearly internal audit plan based on risk assessments.
  
  
• Perform comprehensive IT security audits, IT application controls and IT general controls.
  
  
• Develop and maintain IT audit documentation, including process flows, risk control matrices and testing strategies.
  
  
• Test the design and effectiveness of ITGC controls, reporting on weaknesses and inefficiencies.
  
  
• Ensure compliance with relevant regulatory and industry standards (e.g. NIST,ISO27001) by evaluating IT systems and processes.
  
  
• Collaborate with stakeholders to align audit practices with standards.
  
  
• Assess the effectiveness of data integrity controls and access management controls to ensure that sensitive information is protected and accurately maintained.
  
  
• Work closely with IT, Information Security and business teams to understand control requirements, share audit findings and ensure remediation of issues.
  
  
• Provide advisory support in implementing effective ITGC frameworks.
  
  
• Stay updated on best practices and emerging trends in ITGC, risk management and auditing standards.
  
  
• Recommend process improvements to enhance control effectiveness and efficiency.
  
  
• Prepare and present clear, actionable audit reports and executive summaries to senior management, highlighting findings, risks and recommend corrective actions.