IT Auditor at Crusader Pensions Limited

Summary

As an IT Auditor, you will play a crucial role in evaluating and ensuring the effectiveness of an organization's information technology (IT) systems, processes, and controls. This position involves assessing the security, integrity, and availability of data, as well as evaluating compliance with relevant regulations and industry standards. IT Auditors help organizations identify and mitigate risks related to IT, safeguard sensitive information, and enhance overall operational efficiency.

Responsibilities

Risk Assessment:

• Conduct risk assessments to identify potential vulnerabilities and threats to the organization's IT infrastructure.
• Evaluate the impact of IT risks on business operations and data integrity.

Audit Planning and Execution:

• Develop comprehensive audit plans based on risk assessments and regulatory requirements.
• Execute IT audits, including the examination of systems, processes, and controls.
• Review and assess IT policies, procedures, and documentation.

Compliance Verification:

• Ensure compliance with relevant laws, regulations, and industry standards (e.g., GDPR, HIPAA, ISO 27001).
• Monitor changes in regulations and update audit procedures accordingly.

Security Assessment:

• Evaluate the effectiveness of IT security measures, including firewalls, encryption, access controls, and intrusion detection systems.
• Identify and report security vulnerabilities and recommend remediation measures.

Data Integrity and Confidentiality:

• Assess the accuracy, completeness, and confidentiality of electronic data.
• Recommend measures to protect sensitive information and prevent data breaches.

Documentation and Reporting:

• Maintain thorough documentation of audit processes, findings, and recommendations.
• Prepare detailed audit reports for management, highlighting areas of concern and suggesting improvements.

Collaboration and Communication:

• Collaborate with IT and business units to understand processes, systems, and potential risks.
• Communicate audit results and recommendations clearly and effectively to various stakeholders.

Continuous Improvement:

• Stay informed about emerging trends, technologies, and threats in the IT audit field.
• Provide insights and recommendations for continuous improvement of IT processes and controls.

Qualifications:

• Bachelor’s or Master’s degree in information systems, Computer Science, or a related field.
• Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or similar.
• Proven experience in IT auditing, risk management, or information security.
• Strong knowledge of IT systems, networks, and security protocols.
• Familiarity with relevant laws, regulations, and industry standards.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and collaboratively in a team environment.