Senior Lead, Internal Audit (IT)

• Design, implement, and sustain IT audit programs/tests utilizing risk-based audit methodologies, incorporating data science and automation techniques.
• Conduct IT audits, regulatory compliance evaluations, and IT risk assessments that include IT general controls, application controls, business cycle reviews, and IT security evaluations.
• Assess IT internal controls and pinpoint areas where control enhancements can be made.
• Detect deficiencies and deliver actionable recommendations to rectify and mitigate identified risks, with the ability to translate technical challenges into business implications.
• Rank findings and recommendations, facilitating collaboration among various stakeholders to reach consensus on effective solutions while ensuring proper risk mitigation.
• Maintain clear and systematic documentation of the audit processes and results.
• Present audit results during closing meetings, draft the final audit report for distribution, and present findings to the Audit Committee as necessary. Perform required follow-ups to ensure timely and effective mitigations or remediations.
• Assist fellow business auditors as part of an integrated audit team for selected audits. Areas of support may include application reviews, workflow validation, control configuration, access rights governance, and data analytics.
• Participate in selected advisory projects to assist the business, such as special reviews, enterprise risk management initiatives, and the implementation of new processes or tools.

Requirements:

• A relevant degree in Computer Science, Information Systems, or a related field from a recognized educational institution. A dual qualification in IT and Accountancy is advantageous.
• Professional certifications (CISA, CISSP, PCI DSS) are highly desirable.
• Strong understanding of ISAE 3402/3000, SSAE 3402/3000, SOC 1 and SOC 2, COSO, COBIT, ISO/IEC 27000, ISO 31000, or similar standards.
• Proficient in IT audits, including IT General Controls, IT Application Controls, Security Controls, IT Infrastructure & Network, and Cybersecurity. Familiarity with Financial, Compliance, and Operational audits is a significant advantage.
• A minimum of 5 years of experience in IT audit or IT risk management, preferably with internal audit experience in a Big 4 firm or leading IT audits within a multinational organization.
• Experienced in evaluating technology areas encompassing infrastructure, applications, cybersecurity, cloud technologies, governance processes, IT project management, and cross-functional IT processes.
• Proven ability to plan, scope, and execute IT audits independently with minimal supervision.
• Experience in managing outsourced internal auditors.
• Excellent interpersonal and communication skills, with the capability to engage and network with stakeholders at various organizational levels.
• Strong conceptual, analytical, and problem-solving capabilities.
• Self-driven, capable of independent thought, yet demonstrates strong teamwork orientation. Comfortable acting as both an individual contributor and a team player, with ample opportunities for coaching and leadership development across the team and organization.