Senior_Officer - Internal Audit (IT/IS)

Job Description

Role SummaryResponsible for executing and completing internal audit plan of the company and support co-sourced internal auditÿpartners and external auditors for performing their audit activities.The role is responsible performing audits ofÿboth technical and non-technical nature and ensuring the follow up and implementation of assigned action plans toÿclose the observations. The role includes the preparation of various audit documentation including audit program,ÿaudit reports and presentations for Senior Management review.ÿMain Duties and Responsibilities? Assist Manager Internal Audit (MIA) in preparation of Internal Audit Plan for the company through identificationÿof risk areas where the business should focus on implementation and enhancement of controls.ÿ? Conduct regular IT / IS audit reviews in accordance with internal audit plan and audit testing of specifiedÿareas and identify reportable issues and dimension of risks to be reported to the management.ÿ? Perform internal audit and risk management of the various processes, technologies, and systems of theÿcompany with a view to identify weaknesses and recommend improvement to the processes, controls,ÿsystems, procedures, etc.ÿ? Conduct IT / IS audit reviews to cover (not limited to) internal IT policies, standards, procedures, processesÿand access/authority matrices.ÿ? Responsible for proactively maintaining and updation of the internal audit plan document with theÿupdated status of audits along with man days consumption.ÿ? Maintain and update Internal Audit observations in the Risk Register and record actions in the ActionÿRegister.ÿ? Conduct IT security audits of systems, networks and databases and identify weaknesses to be addressed.ÿ? Coordinate the audit scope, objective and timelines with internal departments and sections at the company.? Manage the execution of audit assignments with departments and sections to ensure audit deadlines areÿadhered to and effective completion of audit plan for the year.ÿ? Evaluate information system general computing controls and provide recommendations forÿimplementationsÿ? Perform testing of controls and compliance assessment against known national and internationalÿstandards and best practices.ÿ? Provide the company management with guidance on IT risk management matters, particularly on application,ÿdatabase and infrastructure security.ÿ? Assist MIA in conducting audit for the source of company?s performance against KPIs set by the ManagementÿCommittee to provide assurance in KPI ratings.ÿ? Identify ways to efficiently utilize tools to analyze data to improve audit efficiency and effectiveness,ÿ(including for risk assessments).ÿ? Prepare and report audit results to executives and assist MIA in preparation of reports to AuditÿCommittee.ÿ? Document the observations to bring-out business information security and technology risks.ÿ? Advise on the mitigating strategies and controls which helps to mitigate the risks.ÿ? Effectively communicate timelines, scope of audit, and resource allocation with the different business units and sections.ÿ? Prepare audit program / checklists and risk control matrix for the audit to conduct effective reviews andÿbring out standardization.ÿ? Follow-up with departments and sections on the observations and to monitor the closure of identifiedÿrisks.ÿ? Keep abreast of industry leading standards and best practices (ITIL, NIST, COBIT, NESA, etc) to ensure thatÿthe audit reviews are performed against relevant standards and recommendations are in-line with theÿbest practices applicable to the business.ÿ? Validate data provided by the departments and section for their accuracy.

Keyskills :