IT Internal Auditor

Overview

We are looking for a skilled IT Internal Auditor to evaluate our information technology controls, identify risk areas, and measure the efficiency of IT systems and processes. Candidates should have practical experience with ACL data analytics and a sound knowledge of IT general controls, application controls, and audit procedures.

Key Duties

• Plan and conduct IT audits aligned with risk evaluations and company goals.
• Assess IT General Controls such as access management, change management, IT operations, backup, and security measures.
• Examine application controls and business workflows to detect control gaps and risks.
• Utilize ACL to extract, analyze, and verify extensive datasets.
• Create ACL scripts to test data, identify anomalies, duplicates, unusual activities, and control breaches.
• Engage in ongoing auditing and data analytics to uncover trends and potential threats.
• Audit user access rights, segregation of duties, privileged access, and system log activities.
• Verify the completeness and accuracy of data involved in audit processes.
• Maintain detailed records of audit methodologies, findings, evidence, risks, and suggested improvements.
• Compose clear audit reports and effectively present outcomes to management and stakeholders.
• Monitor corrective action plans and conduct follow-up audits.
• Assist with compliance audits related to standards such as COBIT, ISO 27001, PCI DSS, or other applicable regulations.
• Work collaboratively with the internal audit team, information security personnel, risk management, compliance, and IT departments.

Qualifications

• Bachelor’s degree in IT, Computer Science, Accounting, Finance, or related discipline.
• Experience in IT auditing, internal control auditing, technology risk, or information security.
• Hands-on expertise with ACL audit data analysis tools.
• Comprehensive understanding of IT general and application controls.
• Familiarity with risk-oriented auditing frameworks and internal control systems.
• Strong analytical, problem-solving, documentation, and communication capabilities.

Preferred Certifications

• CISA (Certified Information Systems Auditor)
• CIA (Certified Internal Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• ISO 27001 Information Security Management System certification
• Other pertinent information security certifications