Senior Lead, Internal Audit (IT)

• Design, implement, and sustain IT audit programs/tests utilizing risk-based audit methodologies, incorporating data science and automation techniques.
• Conduct IT audits, regulatory compliance evaluations, and IT risk assessments across various domains, including IT general controls, application controls, business cycles, and IT security reviews.
• Evaluate the effectiveness of IT internal controls and pinpoint areas for enhancement.
• Identify weaknesses and propose actionable recommendations to mitigate and resolve identified risks, with the capability to interpret technical challenges as business concerns.
• Rank findings and recommendations, facilitating consensus among multiple stakeholders on suitable solutions while ensuring that risks are adequately addressed.
• Maintain clear and structured documentation of audit procedures and outcomes.
• Deliver audit findings at closing meetings and prepare the final audit report for distribution, with presentations to the Audit Committee as necessary. Conduct follow-ups to guarantee timely and effective remediation efforts.
• Assist fellow business auditors as part of a collaborative audit team for specific audits. Areas of support may include application reviews, workflow validation, control configuration assessments, access rights governance, and data analytics.
• Engage in selected advisory projects to aid the business, such as special assessments, enterprise risk management initiatives, and the introduction of new processes or tools.

Requirements:

• A relevant degree in Computer Science, Information Systems, or a related field from a recognized educational institution. Dual qualifications in IT and Accountancy are advantageous.
• Professional certifications such as CISA, CISSP, or PCI DSS are strongly preferred.
• Solid understanding of ISAE 3402/3000, SSAE 3402/3000, SOC 1 and SOC 2, COSO, COBIT, ISO/IEC 27000, ISO 31000, or similar standards.
• Expertise in IT audits, including IT General Controls, IT Application Controls, Security Controls, IT Infrastructure & Network, and Cybersecurity. Familiarity with Financial, Compliance, and Operational audits is highly beneficial.
• A minimum of 5 years of experience in IT audit or IT risk management, ideally with internal audit experience in a Big 4 firm or leading IT audits within a multinational corporation.
• Proficient in assessing technology domains encompassing infrastructure, applications, cybersecurity, cloud technologies, governance procedures, IT project management, and overarching IT processes.
• Exhibits the ability to plan, scope, and conduct IT audits autonomously with minimal oversight.
• Experience in managing outsourced internal audit teams.
• Exceptional interpersonal and communication skills, capable of engaging and networking with stakeholders across various levels.
• Strong conceptual, analytical, and problem-solving abilities.
• Self-driven, with an independent thought process while also demonstrating a strong team-oriented approach. Comfortable working as both an individual contributor and as part of a team, with ample opportunities for coaching and leadership within the team and organization.