The Information System Audit Lead will support the Head, Internal Audit in providing independent assurance and advisory over the organization's information systems by leading risk-based IT audits, evaluating technology controls, identifying IT risks, and ensuring the confidentiality, integrity, and availability of systems in alignment with regulatory requirements and international standards.
Your Role Accountabilities are:
- Responsible for developing a risk-based Annual IT Audit Plan by identifying areas of audit - the internal audit team has to initiate the preparation of an annual audit plan at the beginning of the year.
- Leading/conducting projects in the IT audits, compliance audits, investigations and advisory on the IT domain.
- Identify and evaluate the company's audit risk areas relating to Information Technology through a risk-based audit methodology.
- Plan the resources and requirements for the different IT audits and special assignments.
- Lead consulting engagements related to Information and network security, IS governance, Business continuity and disaster recovery based on best practices of each area (ISO 27000, ISO 20000, ITIL and COBIT framework) if required to do so.
- Communicate the results of consulting projects via written reports and oral presentations on a timely basis.
- Review of Technology related policies and procedures and any IT operations of the Company for submission to the Head, Internal Audit before being raised for management/board approval.
- Conduct or lead the Internal Audit team in performing any IT-related fraud investigations or any special audit assignments relating to the IT domain.
- Relevant University degree or its equivalent in science or social science
- Relevant Post Graduate degree and Possession of professional certification in information system auditing (i.e, CISA/CISSP).
- Post qualification experience of 10 years in energy, power, financial or manufacturing sector.
- Hands-on experience on the use of ACL to perform data analysis and investigations.