IT Audit Senior

Job Description Details

The IT Audit Senior is responsible for conducting IT audits and risk assessments, ensuring compliance with regulatory requirements, and evaluating internal controls related to IT systems and processes. The role requires strong analytical skills, attention to detail, and the ability to provide valuable insights to clients regarding IT risks and controls.

Primary Duties & Responsibilities

Engagement Management
Plan and execute IT audits as part of the financial audit process, ensuring compliance with established standards and regulations.
Assess IT general controls (ITGC), application controls, and cybersecurity risks.
Evaluate the effectiveness of internal controls related to IT systems, data security, and risk management processes.
Identify potential risks and recommend practical solutions to mitigate IT and cybersecurity threats.
Assist in the performance of Vulnerability Assessment and Penetration Testing (VAPT) and provide recommendations for security improvements.
Support clients in compliance with ISO 27001, COBIT, NIST, PCI-DSS, and other IT governance frameworks.
Prepare detailed reports and present audit findings and recommendations to clients and stakeholders.
Collaborate with financial auditors to integrate IT audit findings into overall audit reports.
Provide mentorship and guidance to junior team members.
Stay up-to-date with emerging IT risks, cybersecurity threats, and regulatory changes.

Relationship Management
Establish and maintain relationships with key project stakeholders.
Maintain a clear coordination and good working relationship with client personnel, peers, subordinates, and other associates within and outside the Firm.
Keep clients aware of significant developments in IT governance, cybersecurity, and risk management.
Provide immediate assistance and/or advice for the professional needs of the clients.
Provide timely feedback to staff assistants about their job performance, i.e., their strong and weak points and areas for improvement.

People Management and Administrative Functions
Provide timely feedback to staff assistants about their job performance.
Accomplish and discuss Performance Review Reports (PRRs) of staff assistants immediately after every engagement.
Participate in an annual performance review process through deliberations on the overall performance of staff assistants.

Professional Development
Take charge of your professional development.
Attend in-house or relevant external seminars and training sessions as a participant or facilitator for continuous professional development and enhancement of technical skills and competence.
Obtain necessary certifications expected of the position as prescribed in the policy.

Qualifications
Must be a graduate of a Bachelor's degree in Accountancy, Internal Audit, Information Technology, Computer Science or any related field (with certifications)
With at least 3 years of relevant work experience in IT audit, IT risk management, or cybersecurity assessments.
Proficient knowledge of IT audit methodologies, ITGC, and IT compliance frameworks.
Experience in evaluating internal controls, identifying control weaknesses, and making practical recommendations for improvement.
Excellent analytical skills to identify patterns, trends, and anomalies in data and processes.
Demonstrates integrity, values, principles, and work ethics.

Preferred Qualifications
Professional certification such as Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or Certified Public Accountant (CPA).

---