IT, Audit & Assurance Manager at Fidson Healthcare Plc

ABOUT THE ROLE:

• The IT, Audit & Assurance Manager oversees and manages the IT audit and assurance activities in the organization.
• This role involves evaluating IT systems and processes, ensuring compliance with regulatory requirements, and enhancing the effectiveness of IT controls.
• The manager will work closely with internal and external stakeholders to identify risks, develop audit plans, and ensure the implementation of robust IT governance frameworks.

EDUCATIONAL REQUIREMENT:

• Minimum first degree in Information Technology, Computer Science, Accounting, Finance, Business Administration, Economics, or a related numerate discipline.
• A Master’s degree or relevant certification (e.g., CISA, CISSP, CPA) is preferred.

MINIMUM RELEVANT WORK EXPERIENCE: 

• 7 years of experience in the IT, and audit & assurance function of a similar organization.

Required Competencies and Work Skills

• Strong verbal and written communication skills, with the ability to effectively present complex information to stakeholders.
• Proficient in data analysis, risk assessment, and root cause analysis techniques.
• Excellent problem-solving and critical thinking skills, with the ability to identify and address control weaknesses and operational inefficiencies.
• Thorough understanding of relevant regulatory requirements (e.g., cGMP, FDA, CGMP) and relevant audit and control frameworks (e.g., COBIT, ISO 27001)
• Proficient in the use of audit software, data analytics tools, and other relevant technology.
• Highly organized, detail-oriented, and able to multitask and prioritize effectively.
• Collaborative approach, with the ability to work cross-functionally and build strong relationships with stakeholders.
• Commitment to professional integrity, objectivity, and independence.
• Passion for continuous improvement and a drive to enhance the organization's risk management and control environment.
• Strong leadership and people management skills, with the ability to mentor and develop audit team members.

Key Job Roles

Risk Assessment and Audit Planning:

• Develop and implement a comprehensive, risk-based annual audit plan based on established risk assessment procedures.
• Ensure the audit plan covers key business processes, controls, and regulatory requirements, including manufacturing, quality assurance, supply chain, finance, and IT.
• Ensure that IT controls effectively safeguard data and ensure compliance with regulations.
• Continuously monitor the risk landscape and adjust the audit plan as necessary to address emerging risks, such as cybersecurity threats, supply chain disruptions, and regulatory changes.
• Collaborate with the Head of Risk, Audit & Assurance to align the audit plan with the organization's strategic objectives and risk appetite.

Audit Execution and Reporting:

• Plan, conduct, and oversee audits to evaluate the effectiveness of the company's policies, procedures, and controls.
• Develop comprehensive audit programs and procedures to optimize the timing and delivery of audit activities, ensuring efficient use of resources and minimizing disruption to operations.
• Manage audit teams, including directing, mentoring, and coaching direct reports to ensure the delivery of high-quality audit results.
• Review audit observations, evaluate their potential impact, and ensure that responses to audit findings are appropriate, timely, and effective in addressing root causes.
• Prepare and present clear, concise, and actionable audit reports that highlight key findings, risks, and recommendations, with a focus on driving meaningful change.
• Document audit processes, findings, and follow-up actions for accountability and transparency.
• Continuously seek opportunities to enhance the audit methodology and leverage technology to improve the efficiency and effectiveness of audit activities.

Fraud Investigation and Control Improvement:

• Supervise the daily review of transactions, focusing on appropriate posting and compliance with statutory deductions, and investigate any irregularities.
• Investigate any alleged cases of fraud, waste, abuse, or inefficiencies, and make recommendations on appropriate preventive or corrective controls.
• Identify opportunities for process improvements and implementation of enhanced controls to mitigate risks and strengthen the control environment, with a particular emphasis on areas such as inventory management, procurement, and sales and distribution.
• Collaborate with the compliance function to ensure the organization's control framework aligns with relevant regulatory requirements and industry best practices.
• Monitor and adapt to changes in regulatory requirements and best practices.

Stakeholder Management and Collaboration:

• Serve as a trusted advisor to management, guiding risk management, control improvements, and compliance matters.
• Collaborate with cross-functional teams, including operations, finance, IT, and quality assurance, to ensure the effective implementation of audit recommendations and control enhancements.
• Maintain effective relationships with external stakeholders, such as distributors, institutions, and law enforcement agencies, as needed, to facilitate information sharing and coordinate investigations.
• Provide regular updates and reports to the Head of Risk, Audit & Assurance, and other key stakeholders on the overall risk and control environment.
• Carry out other responsibilities as may be required by the Head of Risk Audit & Assurance and Management.