IT Auditor

About This Role

This IT Auditor Associate role is part of the Internal Audit IT Team, focusing on Information Technology systems, Cyber Security, and Data Management functions. The associate will operate with a high degree of independence and autonomy, participating in all stages of the audit process under supervision.

Responsibilities

• Participate in all types of regional or global IT audits, as part of either dedicated audits of IT functions or integrated audits conducted with business/financial auditors
• Independently and autonomously participate in the audit process: create diagnostic matrix with proposed processes and controls for review, identify use cases for data quality testing and relevant sampling strategies, provide concise and comprehensive debriefing presentation for IGAD management and auditees
• Ensure that Audit management is informed, on a timely basis, of all significant issues arising from missions and of any event that may have an impact on the company
• Write clear and impactful findings and audit reports that provide added value to the organization
• Perform diligent follow-up of audit recommendations and action plans
• Contribute to the development of risk assessment, internal control evaluations, and other processes necessary to determine areas of risk or weakness that will contribute to the development of audit plan and strategy
• Participate in department-wide transformation projects (data analytics, digital transformation, etc.) and actively contribute, communicate and implement the changes, and support others through the process

Requirements

• Bachelor's degree in Computer Science, Information Systems, Information Technology or a business discipline
• At least 3 years of information systems experience, preferably within banking/financial institutions
• Knowledge of cyber security principles, practices, and technologies
• Knowledge of one or more IS/IT areas: governance, projects, developments and SDLC, production, security, risk management, disaster recovery planning, and technical infrastructure components
• Familiarity with IS/IT processes (incident management, change management, release management, configuration management, etc.)
• Knowledge of IT Security concepts, familiarity with vulnerability testing and awareness of security exploits
• Familiarity with Infrastructure components, such as: Database management systems (e.g., DB2, SQL Server and Oracle), major computing platforms (Windows NT/2000, UNIX operating systems) and client/server architectures, commonly used systems and applications, and web-based technologies, Network components (firewalls, routers, switches, IAPs)
• Ability to communicate in English, both orally and in writing

Nice to have:

• Proficiency in security assessment tools and methodologies (e.g., vulnerability scanners, penetration testing)