job descriptions:
• understand or define audit scope & develop audit plan/program
• understand it security and governance review, is/it policy and it general and application inbuilt control audit
• identify risks and assess existence, efficiency and effectiveness of it control environment and processes
• manage/ execute audit test procedures including reviewing and analysing evidences
• comparison of client organisations processes with best practices for standards and procedures
• identify areas of improvements and provide recommendations from assessment
• draft high-quality reports and ensures findings are accurate along with presentation skills
• ensure timely delivery of status updates and final reports to clients
• provide mentorship and coaching to staff; responsible for technical development of staff
• keep abreast of emerging technologies with the it environment and help in developing audit plans to counter whatever risks that might be associated with the application of such technologies
• ready to travel
knowledge:
• well familiar with basics of audit standards and frameworks sox, coso, cobit, nist, iso
• basic understanding of system operations, database, applications, firewall, network management, data centre controls
• ability to use data analysis tools like acl, ms excel, idea, tableau