IT Audit Controller

About the role

The IT Audit Controller plans and conducts IT audits to evaluate the effectiveness of IT governance, risk management, internal controls and information security. The role identifies control weaknesses, recommends improvements and monitors corrective actions so that the organisation complies with its policies, regulatory requirements and industry best practices.

Key responsibilities

• Prepare the annual business development plan and assist in preparing and executing the annual IT audit plan.
• Conduct IT audits using approved methodologies and standards, assessing IT general controls, application controls and cybersecurity controls.
• Evaluate compliance with internal policies, regulatory requirements and industry frameworks, and identify IT risks, control gaps and improvement opportunities.
• Prepare clear reports and present findings to the audit team and management, helping shape the audit strategy so that external auditors can rely on automated systems and controls supporting financial reporting.
• Follow up on audit recommendations and support internal, external and regulatory audit activities.
• Maintain accurate audit documentation and working papers, and stay informed on emerging IT risks, cybersecurity threats and regulatory changes.

Required profile

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity or a related field.
• At least 3-5 years of experience in IT audit, IT risk management, information security or a related role.
• Professional certification such as CISA is an advantage.

Required skills

• Sound knowledge of IT auditing, risk management and IT general controls (ITGCs).
• Familiarity with COBIT, ISO 27001, NIST and ITIL is desirable, as is knowledge of auditing standards.
• Strong analytical, problem-solving and report-writing skills, and good communication and stakeholder management skills.
• Proficiency in Microsoft Office; experience with audit or GRC tools is an advantage.