Job Description
Job Purpose:- The Head, IT and Systems Audit is responsible for providing independent assurance on the effectiveness, security, reliability, and governance of the Group's information technology environment, systems, applications, and technology-related controls across subsidiaries and business units. The role leads the planning and execution of risk-based IT audits to assess IT governance, cybersecurity, systems controls data integrity, technology operations, and compliance with Group policies and applicable standards.
Main Duties and Responsibilities
Key Responsibilities:
Advertisement
Group IT Audit Strategy and Planning:
Develop and implement the Group-wide IT and Systems Audit strategy aligned with business objectives technology risks, and the internal audit charter.
Prepare risk-based annual IT audit plans covering Group companies, subsidiaries, business applications,infrastructure, and technology processes.
Identify emerging IT risks arising from digital transformation, cloud adoption, cybersecurity threats, and technology changes
Establish IT audit methodologies, standards, procedures and quality requirements.
Assess the effectiveness of IT governance structures, policies, and decision-making processes across the Group.
Review alignment between IT strategies and business objectives
Evaluate IT resource management, technology investments, and IT service delivery performance.
Assess the effectiveness of IT policies, procedures, and governance frameworks.
Lead audits of enterprise systems, business applications, and critical information systems.
Evaluate application controls, including:
User access management
Segregation of duties
System configuration controls
Data processing accuracy
Change management controls
System interfaces and integrations
Review ERP systems and other critical business applications to ensure reliability, security, and operational effectiveness.
4. Cybersecurity and Information Security Audit:
Assess the effectiveness of cybersecurity controls policies, and practices.
Review information security governance, identity and access management, and security monitoring processes
Evaluate controls related to data protection, vulnerability management, incident response, and cyber risk management.
Provide assurance on the adequacy of controls designed to protect the Group's information assets.
5. IT Infrastructure and Operations Audit:
Lead audits of IT infrastructure, including:
Networks
Servers
Databases
Cloud environments
Data centers
IT service management processes
Evaluate system availability, performance, reliability, and operational controls.
Review backup, disaster recovery, and business continuity arrangements.
6. Data Management and Analytics Audit:
Assess controls over data governance, data quality, data ownership, and data integrity.
Review data management practices within enterprise systems.
Evaluate controls over financial, operational, and business-critical data.
Promote the use of data analytics to improve audit coverage and identify control exceptions.
7. IT Risk Management and Internal Controls:
Assess technology-related risks across Group companies and recommend appropriate mitigation measures.
Evaluate the effectiveness of IT internal controls and identify weaknesses.
Review compliance with Group IT policies, regulatory requirements, and industry standards.
Monitor significant IT risks and communicate critical issues to senior management.
8. Audit Execution, Reporting, and Advisory:
Oversee IT audit engagements from planning through reporting.
Review audit findings, root causes, risk impacts, and recommendations.
Present significant IT audit issues to Group management, Audit Committee, and relevant governance bodies.
Provide advisory support on technology initiatives while maintaining audit independence.
Subsidiary and Group Oversight:
Group technology standards.
Identify opportunities for standardization, efficiency improvement, and risk reduction.
Evaluate the maturity of IT controls across Group entities.
Provide consolidated reporting on IT risks and control maturity across the Group.
Audit Follow-up and Continuous Improvement:
Monitor implementation of IT audit recommendations
Track remediation of significant findings and recurring control weaknesses.
Report unresolved IT risks to appropriate governance forums.
Continuously improve IT audit approaches ,tools. And methodologies.e IT audit approaches tools, and methodologies.
12. Leadership and Team Management:
Collaborate and Support Corporate Technology department in coaching, and developing IT audit professionals.
Allocate audit resources effectively across Group entities and technology areas.
Promote professional standards, ethical conduct, and continuous learning.
Job Requirements
Qualification and Skills
Education:
Master's degree (preferred) or Bachelor's degree in Information Technology, Computer Science, Information System, Software, Computer Engineering or any other relevant fields (with strong IT & Systems audit experiences).
Experience:
A minimum of 7 years for a Master’s degree and 9 years for a Bachelor's degree with progressive professional experience in IT Audit, Information System Audit, It Controls, Information Security Assurance or related functions and with at least two and three years supervisory roles respectively.
Experiences in auditing large capital projects set ups,in a diversified business portfolios such as Agricultural sector including farm operations and livestock development, Construction projects, Manufacturing, logistics, export and import trading are desired.
Professional Competencies Required
Practical experience in IT auditing, IT governance and information systems controls.
Proven ability to plan and execute risk-based IT audits covering ERP systems.
Practical expertise in auditing ERP systems, preferably MS Dynamics 365
Strong knowledge of IT General Controls,
Good report writing, presentation and communication
High professional integrity and confidentiality
How To Apply
Interested candidates who meet the requirements are invited to apply using the link below.
" https://forms.gle/4HQ5WBzBvCot2EAX9 "
