IT Auditor

Job Summary

• We are seeking a detail-oriented IT Auditor to provide independent, risk-based assurance on IT controls, payment-processing systems, cybersecurity, and technology governance. The successful candidate will assess risks, evaluate regulatory compliance, identify control weaknesses, and recommend improvements to safeguard the Company’s systems, data, and payment operations.

What you will do

• IT Audit Execution: Plan and execute risk-based audits of IT general controls, applications, infrastructure, databases, networks, cloud services, and technology processes; evaluate IT governance, policies, procedures, and control frameworks, and document evidence, control weaknesses, and recommendations.
• Payment Systems Audits: Assess controls across payment-processing platforms, switching and routing systems, payment gateways, POS services, transaction processing, system interfaces, settlement, reconciliation, and exception management.
• IT Risk and Control Assessment: Evaluate access management, change management, system security, data integrity, backup and disaster recovery controls, and test automated application controls, system interfaces, and system-generated reports to ensure data reliability for financial reporting and operational decisions.
• Regulatory Compliance and Cybersecurity: Assess compliance with applicable CBN directives, data protection requirements, PCI DSS, and relevant ISO standards; review vulnerability management, patching, endpoint and network security, security monitoring, and third-party, cloud, and outsourced service-provider controls.
• Audit Reporting and Remediation: Prepare evidence-based audit reports detailing findings, risk implications, root causes, and actionable recommendations; obtain management responses, track remediation plans, validate corrective evidence, escalate overdue or unresolved high-risk issues, and update the Head of Internal Audit on significant risks and audit progress.
• Stakeholder Collaboration: Collaborate with IT, Information Security, Finance, Operations, Risk, Compliance, external auditors, and HoldCo teams to support audit and assurance activities, and contribute to reporting for senior management and the Board Audit Committee.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related discipline.
• 3–5 years of relevant experience in IT audit, technology risk, or information systems assurance, preferably within fintech, banking, payment services, or another regulated environment.
• Practical knowledge of IT general controls ITGCs, application controls, databases, networks, APIs, system interfaces, cybersecurity, business continuity, and disaster recovery.
• Working knowledge of applicable regulatory requirements and IT control frameworks; CISA and PCI DSS certifications are advantageous, while CRISC, CISSP, and ISO 27001 Lead Auditor certifications are desirable.
• Strong analytical, problem-solving, audit documentation, report-writing, communication, and stakeholder-management skills, with integrity.