IT Audit Manager (Sandton - 1 Discovery Place, GP, ZA, 2196) @ Discovery

Discovery Group Internal Audit IT Audit Manager About Discovery Discovery’s core purpose is to make people healthier and to enhance and protect their lives. We seek out and invest in exceptional individuals who understand and support our core purpose, and whose own values align with those of Discovery. Our fast-paced and dynamic environment enables smart, self- driven people to be their best. As global thought leaders, Discovery is passionate about innovating in order to not only achieve financial success, but to ignite positive and meaningful change within our society.

Group Internal Audit Internal audit falls part of group finance, they are responsible for compiling internal audits throughout Discovery. They audit, work processes systems, and task completed.

• They compile their findings and present it to the area head Key Purpose The successful candidate will be responsible for completing audits inside Discovery and providing feedback on the outcome.
• The successful candidate must have a drive, sense of urgency and work flexibility.
• Areas of responsibility may include but not limited to Scheduling and planning of audits, assignment of staff and review resource requirements.
• Defining the purpose, scope and audit approach of each audit for assigned areas of audit coverage.
• Agree audit scope with client and provide final engagement letter to Senior IT Audit Manager for approval and distribution.
• Ensuring that all risks are addressed for the specific audit engagements.
• Provide feedback to Senior IT Audit Manager on the planning, execution and reporting of the audits.
• Review and sign-off of planning, working papers and reports, and where required raise review notes for the work performed by Senior IT Auditors / IT Auditors (pertaining to Engagement Letters, Audit Planning Memos (“APMs”), system descriptions, walkthroughs, process flow diagrams, Risk and Control Matrix (“RACM”), test procedures, working papers, reports and action plans).
• Address review notes raised by the Senior IT Audit Manager.
• Monitoring of the quality of work performed by the audit team and taking corrective action (where applicable).
• Provide training and supervision to audit team in order to ensure that that the required audit objectives are met and that adequate practical coverage is achieved.
• Assist Senior IT Audit Manager in developing the Audit Universe, Annual Internal Audit Plan, and the Three Year Rolling Plan.
• Monitor progress of audits against plan.
• Track progress /changes in business risks and align audit plan.
• Request feedback from management.
• Escalate cases where feedback is not received.
• Ultimately responsible for quality of audit files (Pentana or other).
• Proactively take on additional tasks as requested by Senior IT Audit Manager.
• Provide meaningful input and monitor the effective and timely implementation of management actions to address any control weaknesses identified through risk profiling, risk events and control self- assessment.
• Conduct a Quality Assurance review of audit files and finalise once comfortable.
• External audit – develop and manage the relationship with external audit as it pertains to the reliance on IT Audit work, data requirements and co-ordination of resources to deliver specific assurance for external audit.
• Drafting and reviewing of engagement letters and final reports for Senior Management review.
• Review of draft observations and forwarding these to business for comment.
• Reporting to: Audit Committees Business Risk Committees Company Excos Management (detailed audit reports) CAE (where applicable) Preparation and submission of Risk and Audit committee reports / packs.
• Attending Audit Committees, Risk Committee and Steering Committee meetings, as and when required.
• Assist in periodic reporting on the status and results of the annual audit plan and the sufficiency of department resources.
• Perform Peer Quality Review Assessments.
• Ad-hoc reporting.
• Education and Experience B Degree or equivalent (and relevant) qualification.
• (Honours / Masters (with Computer Science / Computer Auditing / Information Systems / Auditing as majors) CISA (is required) CIA / ACCA / CIMA / CFSA / CPA / CIA / CISM / CRISC / CGIT / CCSA (one or more of the afore mentioned is preferable) Experience in conducting financial, operational or IT audits.
• Reporting to Audit and/or Risk Committees.
• Essential knowledge: Internal Controls Risk management framework (COSO) IT General Control reviews Application Control reviews Internal controls Corporate and IT governance IT Infrastructure technical knowledge (reviewing of databases and operating systems) Cyber security Corporate governance principles Computer literacy Personal Attributes Upholds ethics and values and demonstrates integrity Takes initiative and works under own direction with the ability to make quick, clear choices which may include tough choices or considered risks Shows respect for the views and contributions of others.
• Strong negotiating and influencing skills.
• Excellent communication skills.
• The candidate should speak fluently, have the ability to write in a well-structured and logical manner.
• Demonstrates an understanding of different organisational departments and functions.

EMPLOYMENT EQUITY The Company’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we actively encourage and welcome people with various disabilities to apply.