Auditor - Technology Audit.Internal Audit and Forensic Services at MTN Nigeria

Mission:

• To provide independent assurance that the Information Technology environment, including systems, applications, processes, and controls, supports business objectives securely, reliably, and efficiently.
• Responsible for performing analysis and monitoring on internal Technology controls, IT equipment, IT system risk management, and the effectiveness of internal controls.

Description:

• Support IT audit team in evaluating data controls, integrity checks, and audit trails of information technology in operation.
• Conduct data extraction, analysis, and security reviews utilizing various databases, spreadsheet and software tools.
• Perform routine and special information technology audits with a basic understanding of information technology internal control concepts and following professional standards.
• Prepare work papers for assigned tasks/audit procedures following the internal audit manual.
• Document relevant facts and information to support testing and conclusions, enabling reviewers to follow the logic and methodology applied.
• Follow the work program as developed by the Technology Audit Manager, seeking guidance when clarification of assigned tasks is needed.
• Maintain all audit administration documentation and information as required on routine and special information technology audits.
• Perform walkthroughs and test the design and operational effectiveness of IT controls.
• Evaluate compliance with internal policies, telecom regulations (e.g., NCC), and data protection laws (e.g., NDPA).
• Identify vulnerabilities and gaps in system configurations, access control, and change management.
• Use Data analysis tools to identify patterns, anomalies, and risks within large datasets.
• Document draft audit issues and recommendations with risk ratings.
• Document and present audit findings to process owners and support remediation tracking.
• Support relevant stakeholders in readiness for external IT audits or regulatory inspections.
• Engage with IT, security, and business teams to understand processes and risk areas.
• Track the implementation of audit recommendations to ensure management addresses identified issues in a timely and effective manner.
• Provide guidance on new technology projects, advising on best practices for security and control from the initial design phase.
• Ensure that the audit is carried out on the eGRC system in line with process and methodology as mandated by the Group Internal Audit and Forensics function
• Report on an ad-hoc basis on specific projects as and when necessary.

Education:

• First degree in Electrical/ Electronics, Computer Engineering, Telecommunications, or Computer Science with strong predilection for engineering; or in any Systems oriented discipline
• Fluent in English
• CISA, CCNA/CCNP, CISSP, CISM, CIA, ISO 27001, COBIT 5,CEH, GSEC,SECURITY +, HFI,NCSF

Experience:

3 – 7 years’ experience in an area of specialisation; with experience in supervising others

• Minimum of 3 years’ experience in IT systems audit or IT security or privacy or technology consulting or cyber security experience in a reputable organization 
• Experience working in a medium to large organization in a Systems/ IT/ Telecomm environment