Information Systems Auditor at Fosad Consulting Limited

Role Responsibilities

• Examine IT controls, evaluate the design and operational effectiveness, determine exposure to risk, and develop remediation strategies.
• Conduct efficient and effective IS audit procedures.
• Review security systems and procedures for potential opportunities for future security breaches and provide information security analysis
• Plan, implement, monitor, and upgrade security measures for the protection of the organization’s data, systems, and networks.
• Draft high-quality reports and provide recommendations and guidance on identified security and control risks
• Develop innovative IS processes to managing significant business risks effectively and efficiently
• Implement the methods, tools and techniques for assurance and audit processes
• Oversee standard general IT controls, such as proper security management segregation of duties, adequate documents and records and access controls, and independence checks
• Detect significantly sub-par control deficiencies related to systems and applications.
• Create and help implement solutions to complex controls issues in an efficient manner while also maintaining independence
• Educate others on control testing requirements and how the company conducts this process as it relates to their area of responsibility
• Maintain the integrity and consistency of IT control frameworks.
• Define audit approach, scope, and plan by applying knowledge of IT controls, and their role in the enterprise
• Keep abreast of the latest legislative and regulatory requirements applicable to the organisation by subscribing to various information channels to maintain updated knowledge and organisational compliance organisational compliance
• Create policies and guidance to the company explaining how risks arise as well as the tools and techniques should be used to mitigate those risks
• Recommend continuous improvements for the quality and effectiveness of financial reporting
• Interpret facts, patterns, and trends to reach evidence-based decisions on the nature of risks and opportunities
• Utilize data analysis to perform tests where fraud likelihood is high.
• Provide advice to the business around fraud risks and controls.
• Interpret relevant legislation and regulations, legal documents, standards, and codes of practice relevant to the business units and their implications.

What We Are Looking For

• Bachelor’s Degree in Computer Science or Business related field
• At least five (5) years of experience directly related to the duties and responsibilities specified.
• Possession of Certification/Licensure Cert Information Systems Auditor (CISA), OR Cert Internal Auditor (CIA), OR Cert Public Account (CPA) is an added advantage
• Knowledge of current technological developments/trends in area of expertise.
• Knowledge of auditing concepts and principles.
• Understands the various types of controls and how they work together to form a strong internal control environment, including understanding relevant controls frameworks used by the company
• Ability to explain governance, risk, and internal control concepts and how regulations can impact internal policy
• Ability to evaluate and review a range of mainframe, PC, and distributed production and applications computer systems.
• Ability to gather data, compile information, and prepare reports.
• Ability to perform control reviews on systems development, operation, programming, control, and security procedures and standards.
• Ability to review system backup, disaster recovery and maintenance procedures.
• Ability to communicate with and understand the requirements of professional staff in area of specialty.
• Ability to create, compose, and edit written materials.
• Knowledge of software requirements for the auditing of computing systems and procedures.
• Knowledge of computer systems development and programming.

Key Performance Indicators

• Compliance and Risk Management Score
• Process Efficiency Indicators
• Adherence to the annual audit plan
• Adherence to budget for IS audit activities
• Number and frequency of queries
• Effectiveness of IS Audits
• Number of irregularities identified
• Compliance with audit standards and guidelines.
• Number of risks identified in financial/ operational systems.
• Number of lapses prevented.
• Turnaround time of audits and investigations.
• Timely and accurate rendition of audit/ investigation reports.
• IT infrastructure availability
• IT cost savings

Application Closing Date
Not Specified.

How to Apply
Interested and qualified candidates should send their CV to: recruitment@fosadconsulting.com using the Job Title as the subject of the mail.