Internal Auditor (ICT)

The Internal Auditor (ICT) will be instrumental in evaluating IT governance, cybersecurity controls, IT general controls, application controls, cloud services, and technology infrastructure across the entire Group and its subsidiaries. This position involves leveraging data analytics to pinpoint control weaknesses and unusual activities, offering actionable recommendations, and contributing to the enhancement of technology risk management practices.

1. Assess IT governance, cybersecurity controls, IT general controls, application controls, cloud services, and technology infrastructure across the Group and its subsidiaries.
2. Utilize data analytics to identify control weaknesses and unusual activity.
3. Provide practical recommendations for improving technology risk management.
4. Support the implementation of improvements in technology risk management.

1. Hold a Bachelor’s degree in Information Technology, Computer Science, Accounting, or a related field from a recognized institution.
2. Possess a minimum of 3-4 years of relevant experience in ICT auditing, internal auditing, cybersecurity, technology risk, or IT controls.
3. Have experience conducting reviews of IT General Controls (ITGC), application controls, cybersecurity, or technology infrastructure.
4. Demonstrate knowledge of relevant auditing, ICT governance, cybersecurity, and internal control frameworks.
5. Be familiar with auditing standards, procedures, applicable laws and regulations, and internal control principles.
6. Exhibit strong analytical and problem-solving skills, including the ability to analyze large data volumes and produce clear audit reports.
7. Possess good communication and report-writing skills, with the ability to articulate technical issues in terms of business risk.
8. Maintain a high level of integrity, independence, professionalism, attention to detail, and sound professional judgment.
9. Be capable of maintaining confidentiality and handling sensitive information.
10. CISA certification or progress towards it is an advantage.
11. Relevant professional certifications such as CRISC, CISSP, CIA, CPA, ACCA, CEH, or cloud security certifications are beneficial.
12. Experience with data analytics tools like SQL, Python, Power BI, Superset, ACL Analytics, or similar is a plus.
13. Familiarity with databases, cloud platforms, Linux, and digital financial systems is preferred.
14. Experience in IT project audits, system implementations, data migration reviews, audit automation, or cybersecurity assessments is an advantage.