Manager - IT Audits

Overview

The IT Audit Manager is entrusted with overseeing the alignment of information technology systems and processes with organizational objectives, regulatory compliance, and risk mitigation. The role includes comprehensive planning and execution of IT audits, risk assessments, advisory services on IT governance, and ensuring adherence to industry standards across all company sites and subsidiaries.

Key Responsibilities

• Create detailed audit plans outlining scope, objectives, and methods for evaluating IT systems’ effectiveness, efficiency, and security.
• Conduct thorough risk assessments to identify IT infrastructure vulnerabilities including cybersecurity threats and system availability concerns, prioritizing audits accordingly.
• Carry out audit activities by testing IT controls, governance, access policies, disaster recovery plans, and operational processes.
• Document audit findings clearly and provide actionable recommendations to remediate identified weaknesses.
• Monitor implementation of corrective actions and verify achievement of desired outcomes.
• Advise management on IT risk management, controls, governance frameworks, and regulatory compliance.
• Evaluate compliance with regulations such as GDPR, ISO27001, ISR, SOX, and HIPAA.
• Collaborate with IT teams, external auditors, and stakeholders to communicate findings effectively to both technical and non-technical audiences.
• Lead audits across IT domains including Industrial IT Systems (SCADA), SAP, corporate applications, IT Governance, Infrastructure, Information Security, GRC systems, and Industry 4.0 technologies.
• Embed and enforce ethical and audit standards as prescribed by the Institute of Internal Auditors (IIA), supervising and coaching audit teams accordingly.
• Implement and monitor adherence to departmental policies and procedures during audit processes.
• Develop and maintain strong working relationships with domain management, staying informed on personnel, process, and regulatory changes affecting audit priorities.
• Lead risk assessment processes and propose updates to audit plans prioritizing high-risk areas.
• Assess audit staffing needs, coordinate assignments, and manage co-sourced or outsourced audits when necessary.
• Ensure audits are completed within approved timeframes and analyze deviations to initiate corrective actions.
• Design audit programs, process flows, risk analyses, and control assessments to improve audit effectiveness.
• Provide guidance to auditors evaluating IT system controls in business audits.
• Identify control deficiencies, improvement opportunities, and cost-saving measures.
• Document audit work in compliance with Internal Audit methodology and IIA standards using tools like TeamMate and GRC.
• Lead audit closing meetings to establish agreement on recommendations and corrective measures with management.
• Follow up monthly on audit recommendations and update management on implementation status.
• Review and finalize audit reports ensuring quality and management buy-in.
• Participate in peer reviews, quality assessments, and assist in obtaining external quality certifications.
• Manage co-sourced/outsourced audit engagements by preparing RFPs, coordinating evaluations, monitoring progress, and ensuring audit objectives are met.
• Perform ad hoc reviews and assist in fraud investigations as requested.
• Comply with safety, quality, and environmental policies to maintain a safe workplace.

Qualifications and Experience

• Bachelor’s degree in Computer Science.
• Professional certifications such as CISA, CISSP, or CISM are advantageous.
• Minimum of 8 years’ professional experience, including at least 4 years managing IT audits and 5 years in internal audit.
• Experience auditing Industrial IT systems within mining or manufacturing sectors is preferred.

Required Skills

• Broad understanding of IT infrastructure including SAP ERP, networks, databases, cloud technology, and cybersecurity.
• Strong knowledge of cybersecurity risks, principles, and protective technologies.
• Familiarity with regulatory frameworks like GDPR, ISO27001, SOX, HIPAA, and IT compliance standards.
• Expertise in audit methodologies including ISACA’s ITAF and COBIT frameworks.
• Analytical and critical thinking abilities to evaluate complex IT environments and data for risk identification.
• Project management capabilities for planning and delivering audit engagements efficiently.