Head, IT Audit at Pishon and Brooks Advisory Services

Job Purpose

• To provide independent assurance to management on IT General Controls.
• Ensure best assurance practice in the plan and execution of IS Audit Programs.
• Ensure enterprise wide compliance of business processes and operations to internal policies, procedures and documentations.
• Incorporation of standard practices, principles and processes into audit programs and execution.
• Review of risk related control issues and draft appriopriate remediation plans.
• Understand the business environment and develop relationships with audit client in providing value added solutions and best practices implementation.

Duties & Responsibilities

• Audit Review of Database Management Systems, Enterprise Network security and Device configuration, Antivirus, Systems Patches and Log Management.
• Audit Review of Software Development Life cycle, Project Management Implementation and Change Management Procedures.
• Audit Review of Data Encryption Processes, Key Management Lifecycle, and Operating Systems, physical and logical security of card holder environment.
• Audit Review of Active Directory, Operating Systems, Data backup and tape management.
• Assess systems and general IT controls and provide practical and Value-added remediation plans.
• Prepare audit reports that summarize the most significant control weaknesses and resulting impact to the organization.
• Participate in multiple and simultaneous risk
• Contribute to internal departmental initiatives such as training, departmental development initiatives and other internal projects as requested.
• Effectively discuss audit issues and develop business focused controls recommendations to strengthen control lapses and weaknesses-based audit while maintaining departmental quality standards. Function as part of a team or work independently when requires.

Requirements
Education:

• University: First Degree(s) in Information Technology, Computer Science, or Related field.
• Others: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or related professional certifications would be an added advantage.
• Experience: Minimum of 10 years’ experience in IT Auditing or a similar role.
• Understanding of the key technology and general controls around enterprise
• Applications and information systems. Candidates must possess the ability to
• Communicate effectively audit issues and remediation plans.

Knowledge:

• Knowledge of Systems and General IT Controls.
• Analytical skills to access Operational and Compliance Requirements of Application Systems and infrastructure.
• Strong Data Analysis and experience with Computer Assisted Auditing Techniques.

Skill / Competencies:

• Ability to multitask and manage competing priorities.
• Deductive reasoning abilities and eye for details.
• Interpersonal and Communication skills.