About This Role
This IT Auditor role involves assessing the effectiveness of information technology controls, systems, and related processes. The position focuses on evaluating IT general controls, information security, and data protection practices to identify vulnerabilities and risks. It suits a professional with a background in IT auditing or related fields who can collaborate with various departments to strengthen technology controls.
Responsibilities
- Conduct IT audits to assess the effectiveness of information technology controls, systems, and related processes
- Evaluate IT general controls, including user access management, system changes, IT operations, and data backup procedures
- Assess information security controls, data protection practices, and system configurations to identify potential vulnerabilities and risks
- Review IT policies, procedures, and documentation to ensure compliance with internal requirements and applicable regulations
- Identify IT control weaknesses, security gaps, and technology-related risks, and recommend appropriate corrective actions
- Evaluate access permissions, segregation of duties, and controls over critical business applications and information systems
- Assess the effectiveness of IT disaster recovery plans, business continuity procedures, and backup and recovery processes
- Assist in preparing IT audit plans, testing procedures, working papers, and reports documenting findings and recommendations
- Follow up on identified audit findings and monitor the implementation of corrective actions
- Support assessments of compliance with relevant IT standards, security frameworks, and regulatory requirements
- Collaborate with IT, Information Security, Risk, Compliance, and other departments to strengthen technology controls and improve IT risk management practices
Requirements
- Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field
- 1 to 4 years of relevant experience in IT auditing, information security, IT risk management, systems administration, or technology assurance
- Basic knowledge of IT general controls, information security principles, and technology risk assessment
- Familiarity with access management, change management, IT operations, databases, and system controls
- Understanding of IT governance frameworks and security standards, such as COBIT and ISO 27001, is an advantage
- Strong analytical, technical, and problem-solving skills, with the ability to identify control weaknesses and assess technology risks
- Proficiency in Microsoft Office, particularly Excel
- Excellent communication and report-writing skills, with the ability to document technical findings clearly
- Strong attention to detail, integrity, professional ethics, and organizational skills
- Ability to work collaboratively with technical and non-technical stakeholders while meeting deadlines
Nice to have:
- Familiarity with audit tools, IT systems, or data analysis tools
- Professional certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), or CompTIA Security+, or progress toward obtaining them
Important Details
- Industry: Information & Communication Technologies
- Experience: 1 - 4 years