IT Internal Audit Manager

Provide direction for IT and Integrated audits

• Develop and manage a rolling, risk-based IT Internal audit plan, with periodic (at least annual) review based on emerging risks.
• Contribute to the integrated audit planning process, ensuring alignment of IT and business risks.
• Ensure alignment with:
  • IIA Global Internal Audit Standards
  • COBIT, ITIL, King IV, and other relevant frameworks
• Compile and manage the budget requirements for IT Internal Audits.
• Drive integration of IT and business risks into the enterprise risk management and combined assurance framework, ensuring alignment between IT, financial, operational, and compliance assurance activities.

Manage Audit Execution (IT and Integrated Audits)

• Manage the execution of the IT audit plan and assigned integrated audits.
• Lead and/or co-lead financial, operational, and compliance audits, where required.
• Act as Engagement Manager overseeing audits from planning through to reporting.
• Plan and allocate resources to ensure delivery against audit timelines, budget, and quality standards.
• Review audit working papers and reports to ensure accuracy, completeness, and alignment with audit objectives and methodology.
• Ensure IT risks are appropriately identified and evaluated across all audit engagements.
• Provide technical guidance and supervision to audit team members.
• Engage with stakeholders to communicate audit scope, findings, and recommendations.
• Ensure timely resolution and follow-up of audit findings and agreed management actions.
• Ensure that the IT internal audit methodology aligns with all relevant IT frameworks, is consistently applied, the guidelines provided by the Head of Internal Audit are adhered to, and internal methodology is always used (i.e. provide guidance to junior staff).
• Plans and undertake fieldwork in respect of special audit assignments (ad-hoc audits) outside of normal IT internal audit coverage plan and deliver output, including reporting and discussion of findings.

Advisory and Integrated Assurance

• Provide advisory input on:

• IT systems development
• Digital transformation initiatives

• Business process improvements
• Ensure appropriate controls are embedded in new systems and processes
• Participate in project governance and steering committees in an advisory capacity.
• Translate IT risks into business and operational impacts.
• Support combined assurance activities, ensuring alignment between IT, financial, operational, and compliance assurance

Reporting

• Provide ongoing feedback to the Head of Internal Audit on:
  • Progress against IT and integrated audit plans
  • Key risks and emerging issues
  • Audit outcomes and stakeholder management
• Contribute to reporting to:
  • Executive Management
  • Risk Committee
  • Audit Committee
• Provide assurance on:

• Effectiveness of IT and business controls
• IT risk management practices
• Control integration across business processes

People Management and Leadership

• Manage and develop IT audit staff and contribute to broader Internal Audit team development.
• Provide coaching, mentoring, and technical guidance.
• Foster collaboration between IT auditors and general internal auditors.
• Ensure optimal team structure and utilisation across IT and integrated audits.
• Promote a culture of:
  • High performance
  • Accountability
  • Continuous improvement

Governance and Quality Assurance

• Adhere to and support the Internal Audit Quality Assurance and Improvement Programme (QAIP) in line with IIA Standards.
• Ensure consistent application of Internal Audit methodology.
• Align to SBV Services’ ISO 9001:2015 Quality Management Standards, ensuring the department’s processes and quality management system always complies with the standard.
• Support SBVs ESG journey, reporting on and managing the ESG requirements to ensure a positive reflection and outcome.
• Maintain independence and objectivity in all engagements

Lead as an Ambassador and executor of Change

• Act as a change management architect in periods of change to ensure business continuity.
• Support the integration of business units into a seamless end-to-end solution for customers.
• Effectively communicate and embed new processes and procedures as they occur, addressing or escalating matters/ concerns to the SME’s (subject matter experts) when required.
• Facilitate the necessary presentations, workshops, or forums to ensure consistent and accurate communication is given across one’s portfolio.

Work Experience

• Minimum of 5 years’ IT internal audit experience, with at least 3 years in a management or supervisory role within a complex or commercial environment.
• Proven experience in IT audit and IT risk management, including the evaluation of general IT controls (GITCs), application controls, and the use of data analytics in audit delivery.
• Exposure to financial, operational, and compliance audits.
• Experience in integrated audits and combined assurance environments.
• Working knowledge of business processes (e.g. procure-to-pay, order-to-cash).
• Experience with emerging technologies and risks (e.g., cloud computing, AI, automation, cyber resilience).
• Exposure to data analytics tools (e.g., ACL, IDEA, Power BI, SQL).

Education

• NQF Level 7 qualification in Information Technology, Information Systems, Internal Auditing, Accounting/Finance, or a related field
• Postgraduate qualification in a relevant discipline (advantageous)
• Professional certifications (or progress towards certification):