Internal Auditor -Cyber & Technology

Empowering Africa’s tomorrow, together…one story at a time.

With over 100 years of rich history and strongly positioned as a local bank with regional and international expertise, a career with our family offers the opportunity to be part of this exciting growth journey, to reset our future and shape our destiny as a proudly African group.

My Career Development Portal: Wherever you are in your career, we are here for you. Design your future. Discover leading-edge guidance, tools and support to unlock your potential. You are Absa. You are possibility.

Job Summary

The core responsibility of an auditor within Absa is to execute audit assignments in accordance with the Group Audit Plan and relevant policies, procedures and quality standards.
To provide specialist advice & support in area of specialization enabling the provision of an approved audit plan in compliance with auditing methodology.

Job Description

Accountability:  Audit Delivery and Issue Assurance

• Develop an in-depth knowledge of the methodology, by attending training sessions and using knowledge gained during audits, use this proactively in executing audit activities.

• Deliver work assigned by the Chief Internal Auditor and Internal Audit managers to a high quality and in accordance with the requirements of the Internal Audit’s function scorecard.

• Assist the Internal Audit managers with planning and execution of design effectiveness and operating effectives testing, uniformly applying the methodology and quality standards, focusing the work on key IT, cyber and change risks, with minimum supervision from the Internal Audit managers.

• Develop and maintain relationships with key audit contacts on each audit by attending continuous stakeholder meetings. In addition, engage closely with stakeholders during assignments and encourage open discussion and interaction with business on the risks associated in their environment.

• Engage proactively with Internal Audit colleagues Absa Internal Audit (AIA) during assignments and request technical assistance where required. Technical assistance may be requested for the review of the risks and controls to be tested, audit working papers and audit report.

• Based on knowledge of business areas, provide guidance to other auditors and peers by sharing best practice so that their work meets and sometimes exceeds quality standards.

• Develop an in-depth knowledge of Absa and the various business areas and use this knowledge to assess risks and controls through identifying, assessing and documenting risks and controls within these processes.

• Evaluate the design and operating effectiveness of controls and document all working papers in line with Absa Group Internal Audit methodology requirements. The working papers must be accurate, reflective of work performed and support conclusions drawn.

• Display professional skepticism, raising and discussing contentious observations with management and provide evidence to support all issues identified.

• On an ongoing basis throughout the audit, discuss and agree the factual accuracy of audit observations with the client.

• Provide feedback to the Chief Internal Auditor, Internal Audit managers and audit team with progress and observations raised during the audit by communicating honestly, frequently and effectively. Build and maintain good working relationships with fellow auditors.

• Participate fully and be supportive in all audits by providing assistance to the team where required.

• Continue to update awareness of risk issues and changes across selected business units from interaction with management and provide feedback to the Chief Internal Auditor and Audit managers.

• Perform issue validation testing as directed and document the results in accordance with the requirements of the Absa Group Internal Audit Methodology.

Accountability:  Knowledge Management

• Improve technical knowledge through self-learning or training including mandatory Continuous Professional Education requirements.

• Share knowledge with Absa Internal Audit colleagues and peers in the business.

• Develop and enhance learning through seeking coaching, training and continual feedback.

• Coach new joiners and trainees on how to apply the Absa Group Internal Audit methodology.

• Build knowledge of business and culture in business units for the technology, cyber and change portfolio as assigned by the Chief Internal Auditor.

• Knowledge of key regulations, policies and regulations for assigned areas.

Accountability:  Reporting

• Prepare audit observations and make sure that they are concise, factually accurate and cover all the significant issues. The observations must be insightful, address the root causes, and have agreed actions that fully mitigate the risk.

• Assist the Chief Internal Auditor and Internal Audit managers where required, in the drafting of the audit report in line with methodology requirements and as per the requirements of the balanced scorecard.

Accountability:  Relationship Management

• Develop and maintain relationships with accountable management on each audit.

• Present effectively at stakeholder meetings relating to continuous business monitoring and audits.

Preferred Education 

• Bachelor’s Degree (Information Technology, Computer Sciences) 

• CISA, CEH or CISM, CISSP  

• ACCA or CPA (Uganda) is an added advantage  

Preferred Experience 

• 2-3 years’ experience in audit, risk and control or commensurate experience in a major financial institution or professional services firm. 

Knowledge and Skills 

• Understands internal control concepts, audit methodology and how to apply them. Understands the principles of the identification, assessment and management of risk.  

• Knowledge of IT General Controls  

• Knowledge and experience with COBIT, ITIL, ISO 27001/NIST 

• Knowledge and experience in network or infrastructure management 

• Cyber, security assessment skills 

• Possesses a broad understanding of the financial services industry 

• Experience with data analytics and Computer Assisted Auditing Techniques (CAATS) will be an added advantage. 

Education

Bachelor`s Degrees and Advanced Diplomas (Required)