Information Systems Auditor

Reports to: Head of Internal Audit
Department: Audit Service

Jobposting service

Job Purpose

• The Information Systems Auditor is responsible for evaluating and assessing the effectiveness, security, reliability and integrity of the organisation's information systems, IT infrastructure, business applications and technology-related internal controls.
• The role ensures that IT systems and processes comply with organisational policies, regulatory requirements and industry best practices while identifying technology-related risks, control weaknesses and opportunities for improvement.
• The successful candidate will conduct independent IT audits, assess cybersecurity controls, evaluate system access management, review data integrity and provide recommendations to strengthen the organisation's IT governance and risk management framework.

Key Duties and Responsibilities
Information Systems Audit and Control Assessment:

• Conduct periodic audits of the organisation's information systems, IT infrastructure and business applications.
• Evaluate the effectiveness of IT general controls (ITGCs) and application controls.
• Review system configurations, user access rights and administrative privileges.
• Evaluate the effectiveness of automated business processes and system controls.

IT Risk Management and Cybersecurity:

• Identify and assess information technology risks that may affect business operations.
• Evaluate cybersecurity policies, procedures and control mechanisms.
• Review firewall configurations, antivirus protection, endpoint security and network access controls.

ERP and Business Application Auditing:

• Conduct audits of ERP systems and other critical business applications.
• Review system controls relating to procurement, inventory, sales, finance and production.

Data Integrity and IT Infrastructure Audit:

• Assess the reliability and security of databases and information storage systems.
• Review data backup, recovery and retention procedures.
• Evaluate server management, network security and infrastructure controls.

Audit Reporting and Compliance:

• Prepare comprehensive IT audit reports highlighting findings, risks and recommendations.
• Communicate audit observations to relevant departmental heads and management.

IT Governance and Process Improvement:

• Evaluate the effectiveness of IT governance structures and policies.
• Assess compliance with applicable data protection and cybersecurity requirements.

Professional Certifications
Candidates with any of the following certifications will have a competitive advantage:

• Certified Information Systems Auditor (CISA).
• Certified Information Security Manager (CISM).
• Certified Information Systems Security Professional (CISSP).
• ISO/IEC 27001 Lead Auditor.
• COBIT Foundation or equivalent certification.

Requirements
Educational Qualifications:

• Bachelor's degree or HND in Computer Science, Information Technology, Information Systems, Computer Engineering, Accounting, or a related discipline.
• A postgraduate qualification in Information Systems, Cybersecurity, IT Audit or Risk Management will be an added advantage.
• Previous experience in manufacturing, FMCG or other large corporate organisations will be an advantage.

Technical Competencies:
The ideal candidate should demonstrate knowledge and practical experience in:

• IT General Controls (ITGCs).
• IT Application Controls.
• ERP systems and enterprise applications.
• IT risk assessment and control evaluation.
• Business continuity and disaster recovery.
• IT governance frameworks, particularly COBIT and ISO 27001.