Senior IT Auditor

The Road Accident Fund’s mission is to provide timely and equitable assistance to those affected by motor vehicle accidents through the provision of appropriate social benefits to ensure financial relief and recovery for qualifying individuals.

Purpose of the Job: Reporting to the Manager: IT Audit, the successful incumbent is responsible for conducting IT audits as per the audit plan and supervise junior staff.

Key Performance Areas

Plan the Implementation of Specific Audits

• Plan and conduct audits as per the approved Internal Audit Methodology.
• Conduct preliminary survey to understand the area to be audited.
• Document and complete the planning documents (system description and risk and control gap analysis) with the auditee (opening meeting) for confirmation and indication of changes that need to be effected.
• Discuss the planning documents with the auditee after the opening meeting for confirmation of changes that need to be effected.
• Formulate the audit program based on the outcome of the preliminary survey using appropriate audit methodologies.

Supervise the Audit Process

• Allocate audit work to auditors as per RACM and manage hours for the audit team.
• Provide regular team progress to the IT Audit Manager.
• Conduct and supervise the audit as per the RACM.
• Review working papers for completeness and accuracy before submission to the IT Audit Manager.
• Review the system descriptions and risk and control gap analysis performed by the internal auditors.

Policy Review and Implementation

• Contribute to the development and implementation of departmental policy, procedures and processes.
• Keep up to date with effective policy and practice execution strategies.

Reporting

• Prepare and submit draft audit report with findings addressing audit objectives and scope to the IT Audit Manager.
• Address review notes from the IT Audit Manager and capture close-out meeting minutes.
• Track the auditee’s progress in resolving findings by conducting follow-ups.
• Provide assurance and recommend controls to business units in accordance with the relevant laws and regulations and National Treasury frameworks.

Stakeholder Management

• Facilitate and manage communication with relevant internal and external stakeholders in relation to investments and proactively and progressively manage the relationships.
• Communicate with all levels of stakeholder contacts.

Qualifications and Experience

• Bachelor’s Degree/ Advanced Diploma in Auditing, Computer Auditing, Information Technology related qualification.
• Registered with the Institute of Internal Auditors and/or ISACA.
• CISA is compulsory.
• CRISC/ CISM/ CGEIT will be an added advantage.
• Relevant 5 - 7 years’ experience in an auditing environment.
• Experience in the completion of SAP Basis, General Controls Reviews (GCR’s) as well as Application Controls Reviews (ACR’s), SDLC, and Cyber Security.

Technical and behavioral competencies required

• Communication.
• Working with people.
• Planning, organizing and coordinating.
• Employee engagement.
• Ethics and values.
• Client service orientation.
• Change management.
• Facilitation and presentation skills.
• Risk management.
• Reporting.
• Computer literacy and Internet.
• Analytical skills
• Principles of Project Management.
• Microsoft Office Suite.
• International Standards for the Professional Practice of Internal Auditing.
• Principles relating to Governance, Risk Management and Public Finance Management Act.
• Understanding of IT governance practices, IT risk management principles and Cyber Security principles
• Exposure to COBIT, ITIL, IIA and ISO standards
• Use of CAATS tools, preferably ACL
• Use of an audit management system, preferably TeamMate.

NB: “RAF offers Total Employment Cost packages with no additional contributions from the Employer, successful candidates are required to structure their packages in a manner that will suit their needs”.

The Road Accident Fund subscribes to the principles of employment equity and preference will be given to People with Disabilities.

Applicants who have not received any correspondence from us within six weeks from the closing date can consider themselves unsuccessful.

Security Vetting shall be conducted on all prospective employees.

It is the applicants’ responsibility to have foreign qualification evaluated by the South African Qualification Authority (SAQA) and to provide proof of such evaluation.