CAREER OPPORTUNITY
INTERNAL AUDIT
Suitably qualified persons are invited to submit applications to fill the following position:
AUDIT ANDADVISORY MANAGER – IT SYSTEMS AND ENTERPRISE-WIDE BUSINESS
PROCESSES
GENERAL ACCOUNTABILITY
This position is responsible for identifying both IT and no IT related risks to assist in updates to the
Internal Audit Plan and in the execution of dedicated reviews to assess the design and operating
effectiveness of IT and non IT processes. The incumbent would collaborate with business process
owners to identify issues and solutions for management consideration and implementation.
KEY RESPONSIBILITIES
Assist the Head of Internal Audit in updating the Internal Audit Plan.
Conduct Risk Control Self-Assessments pertaining to the work and activities as assigned
Provide support in the preparation of the Department’s Annual Budget.
Perform continuous advisory, assurance and post implementation assessments.
Respond to issues raised by the Head of Internal Audit, Executive Director, Audit, Risk and
Compliance Committee, the Board of Directors, Business Executives, Management, Regulators,
External Auditors and other stakeholders.
Generate reports relative to solutions for advisory and/or assurance related assessments covered
directly and in also providing views and advice to the Audit Team members to guide them in
developing solutions for areas which they would have assessed directly.
Conduct process walk-throughs utilizing Microsoft VISIO and the Working Paper Software.
Conduct assessments of the effective design of systems and processes by benchmarking against
practices in existence at other organizations and also via focused intellectual assessments utilizing
own knowledge, knowledge of other team members and knowledge gained from new research to
identify potential design flaws that can impact operational efficiency and process effectiveness.
Develop and design objectives, work steps and detailed project plans for assigned assurance and/or
assigned advisory assessments and employ required project management techniques to manage
delivery expectations.
Perform substantive testing and CAAT analysis required to assess the operating effectiveness of
systems, processes and internal controls.
Prepare and maintain overall documentation, working papers, internal audit reports and notes for
the ARCC and other Board Committee and other correspondence as required to effectively
communicate assessment results and for retention of permanent records in line with Internal Audit’s
standards and also standards and policies of the Corporation.
Assist the Head Internal Audit in conducting assessments of draft policies, procedures and other
processes being developed or updated in the Corporation and for which requests for views of
Internal Audit are made either by management, the Board, Audit, Risk and Compliance Committee
or other Board Committees.
Contribute towards overall assessments of Internal Audit’s own internal processes to enhance
effectiveness and operational efficiency.
Develop and design objectives, work steps and detailed project plans for the performance of
assigned IT assurance and/or IT advisory assessments and employ required project management
techniques to manage delivery expectations.
Assess the controls relating to application processes, physical and logical security; systems
acquisition and development; system and network infrastructure; system architecture; change
management; computer operations and production support.
Execute and oversee multiple concurrent ICT audits, including cyber security, existing production
application, systems currently being developed, technology infrastructure and specialised or
emerging technologies with support from a dedicated IT Audit provider and also the in-house
Internal Audit team.
Provide advisory support to various departments enterprise-wide to strengthen the existing
application controls, configuration and for the effective use of information systems.
Assess data conversion/data migration activities relating to major system changes, system
modifications, server changes and server modifications.
Provide advisory support to various business areas to enhance their management information
strategy and report generation functions.
Develop and document appropriate methodology, process maps, policies and procedures relating to
the performance of IT Assurance Assessments and also IT Advisory reviews.
Assist in monitoring the performance and quality of services being delivered by any contractual IT
Audit provider.
The selected candidate must possess the following combination of qualifications, skills,
training and experience:
Bachelor’s Degree [B.A./B.Sc.] in Computer Studies, Computer Information Management, Finance,
Law, Actuary, HR, Commerce, Engineering, Banking, Marketing, Corporate Communication etc.
Advanced training in IT security and IT risk management required.
IT auditing Certifications: CISSP (Certified Information Systems Security Professional) and / or CISA
(Certified Information System Auditor) strongly preferred.
10 years progressive industry experience in areas such as business advisory, internal auditing, IT
auditing, ICT management, management information system design and development, process auditing,
information security, process re-engineering, system requirements analysis, systems design and systems
development, programming, systems implementation
3-5 Yrs at Managerial Level.
Well experienced in transferring knowledge and best practices to clients.
Experience using and also identifying solutions and quick wins to strengthen ERP systems and webbased portal applications is also required.
Experience working with complex, ambiguous and risky issues and with a high level of success of
applying the correct judgments to those issues.
Experience in performing quality assurance assessments and also self-assessments against best practices
and applicable operating standards.
Experience executing projects which drive major systems and business changes and in assisting users to
retool their skills to effectively use and apply the new systems and change of process following
implementation.
Business acumen and enterprise wide business process knowledge.
Strong oral and written communication skills including demonstrated presentation skills using
Microsoft Office, Visio and Power Point.
Ability to communicate highly technical issues to both technical and non-technical audiences and
demonstrated innovation in IT audit program development and delivery.
Strong problem solving and troubleshooting skills with the ability to exercise mature judgment.
Ability to identify and recommend IT governance, organisational and platform models, tool selections
and application integrations options to clients.
Working and performing tests via an Information System’s test environment.
Knowledge of external leading risk and controls frameworks such as COBIT (Control Objectives for
Information and related Technology), ISO27000, and IT related internal controls.
Proficient and capable of conducting reviews in highly technical areas of current/emerging technologies
including Internet, Intranet, cloud, security, distributed computing, firewalls, and Windows Server
Knowledge of emerging IT issues, internal audit trends and best practices
Ability to provide exceptional client service, demonstrate commitment to continuous learning in order
to stay current regarding applicable strategies, see the “big picture” as well as the details, display
appropriate ethical knowledge and commitment and exhibit a sense of urgency and commitment to
quality and the timely completion of duties.
Effective project management, organization and administrative skills.
Proficient using Microsoft Office Application, ERP Systems other business systems, audit working
paper and analytical tools.
Conflict resolution/ negotiation skills.
Risk assessment and risk management skills and awareness.
Computer assisted auditing techniques.
Ability to maintain effective independence and proper separation of duties.
Applications with Curriculum Vitae, giving details of qualification and experience, must be
submitted by April 10, 2015
E-mail: humanresources3@ttutc.com