Job brief

The IT Audit Controller is responsible for planning and conducting IT audits to evaluate the effectiveness of IT governance, risk management, internal controls, and information security. The role identifies control weaknesses, recommends improvements, and monitors the implementation of corrective actions to ensure compliance with organizational policies, regulatory requirements, and industry best practices.

Duties and Responsibilities

·        Prepare annual business development plan and initiative.

·        Assist in the preparation and execution of the annual IT audit plan.

·        Conduct IT audits in accordance with approved audit methodologies and standards.

·        Assess the effectiveness of IT General Controls (ITGCs), application controls, and cybersecurity controls.

·        Evaluate compliance with internal policies, regulatory requirements, and industry frameworks.

·        Identify IT risks, control gaps, and process improvement opportunities.

·        Prepare clear and concise reports and present findings to the audit team and management.

·        Assist the audit team in crafting the appropriate audit strategy in the light of your findings: provide assurance that the IT systems and controls supporting an organization financial reporting are designed and operating effectively, enabling the external audit team to place reliance on automated systems and  controls.

·        Monitor and follow up on audit recommendations to ensure timely implementation of corrective actions.

·        Support internal, external, and regulatory audit activities.

·        Maintain accurate audit documentation and working papers.

·        Keep abreast of emerging IT risks, cybersecurity threats, and relevant regulatory changes.

            Skills and Qualification

·        Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field.

·        Minimum of 3–5 years' experience in IT audit, IT risk management, information security, or a related role.

·        Professional certification such as CISA is an advantage.

·        Sound knowledge of IT auditing, risk management, and IT General Controls (ITGCs).

·        Familiarity with frameworks and standards such as COBIT, ISO 27001, NIST, and ITIL is desirable.

·        Knowledge of relevant auditing standards is desirable.

·        Strong analytical, problem-solving, and report-writing skills.

·        Good communication, presentation, and stakeholder management skills.

·        High level of integrity, attention to detail, and professionalism.