IT Internal Auditor

Key Performance Areas (KPAs)

1.Risk Assessment and Audit Planning

• Contribute to delivering objective assurance, insights, and value-added recommendations that enhance control effectiveness, support sound governance practices, and align with SBV’s strategic objectives and operations across the Rest of Africa.

• Perform IT risk assessments to identify key risk areas and inform audit scope and approach.

• Participate in the development and execution of the IT internal audit plan.

• Document audit scope, objectives, risks, and control frameworks for each engagement.

• Engage with stakeholders to obtain a clear understanding of business processes and IT environments.

2.Execute IT Audit Assignments

• Execute independent IT and more complex audits in accordance with SBV Internal Audit methodology and professional standards (IIA, COBIT, ISO, ITIL).

• Execute (complex where appliable) audits audit procedures across:

• General IT Controls (GITCs)
• Application Controls
• IT Governance and Risk Management
• Cybersecurity and Information Security
• System implementations and change management

• Assess the design and operating effectiveness of controls and identify control deficiencies, review by senior team members.

• Apply data analytics techniques to enhance audit coverage and efficiency.

• Identify root causes of control weaknesses and assess impact and risk exposure.

3.Audit Documentation and Quality Assurance

• Prepare and review high-quality audit working papers that meet internal and external audit standards.

• Confirm that audit evidence is adequate, dependable, and substantiates the audit conclusions.

• Comply with internal quality assurance and improvement programme (QAIP) requirements.

• Maintain proper audit documentation and records.

4.Reporting and Stakeholder Engagement

• Draft clear, concise, and risk-based audit findings and reports.

• Communicate audit results effectively to management, including risks, implications, and recommendations.

• Facilitate audit discussions with relevant stakeholders and obtain management responses.

• Confirm that recommendations are practical, actionable, and aligned with best practices.

5.Follow-up and Issue Resolution

• Track and monitor remediation of audit findings.

• Validate the implementation and effectiveness of corrective actions.

• Escalate overdue or ineffective actions to management.

6.Team Collation and Mentorship

• Provide guidance and support to junior auditors on audit execution and methodology.

• Collaborate effectively within the audit team and across business units.

• Contribute to building a high-performance, ethical, and value-driven audit function.

7.Compliance, Governance and Reporting

• Comply with the SBV Internal Audit methodology and adhere to International Standards for the Professional Practice of Internal Auditing (IIA).

• Maintain compliance with all pertinent regulatory requirements, including financial sector regulations and POPIA.

• Uphold confidentiality, independence, and objectivity during all audit engagements.

• Prepare audit findings, reports, and supporting documentation for subsequent review.

• Collaborate with management to validate findings and facilitate closing meetings.

• Confirm that recommendations are both practical and appropriately aligned with identified risks.

• Support follow-up procedures to monitor the implementation of management action plans.

• Guarantee the accuracy and completeness of documentation underpinning audit outcomes.

• Provide assistance with administrative responsibilities as needed.

• Subscribe and align to SBV Services’ ISO 9001:2015 Quality Management Standards, ensuring the department’s processes and quality management system is at all times in compliance with the standard.

• Support SBVs ESG journey, reporting on and managing the ESG requirements to ensure a positive reflection and outcome.

Drive the organisation culture

• Drive the department’s values while inspiring confidence and generating excitement, enthusiasm and commitment towards the mission.

• Demonstrate SBV values through professional conduct and teamwork.

• Collaborate effectively with audit team members and stakeholders.

• Support a high-performance, ethical, and quality-driven audit environment.

Minimum Requirements: Work Experience

• Minimum 3 years’ experience in IT auditing or related field (financial services advantageous).

• Proven experience in:
• General IT Controls Reviews (GITCs)
• Application Controls Reviews (ACRs)
• IT risk assessments and audit execution
• Experience working with recognised frameworks (COBIT, ITIL, ISO).
• Exposure to auditing complex IT environments and systems.

Minimum Requirements: Education

• Bachelor’s degree in IT, Computer Science, Internal Auditing, Accounting/Finance or related field.

• Relevant certifications (preferred):

• CISA
• CIA
• CISM / CRISC

Technical Skills

• Proficiency in data analytics tools (e.g., ACL, IDEA, SQL, Excel, Power BI).
• Strong understanding of IT control frameworks and risk management principles.
• Knowledge of cybersecurity concepts and IT infrastructure components.
• Familiarity with ERP systems and core banking/financial systems (advantageous).

Behavioural Competencies Required

Integrity: The ability to demonstrate ethical conduct while upholding independence and impartiality.

Analytical Thinking: The ability to evaluate intricate systems, pinpoint potential risks, and recognize areas where controls may be lacking.

Attention to Detail: The ability to deliver precise and exemplary audit results.

Communication: The ability to effectively presents audit findings and recommendations with clarity and professionalism.

Critical Judgement: The ability to demonstrate sound critical judgement in the assessment of audit evidence.

Stakeholder Engagement: The ability to establish and maintain productive collaborations with business units.

Teamwork: The ability to wors effectively with colleagues to achieve shared goals and actively contributes to team success.

Results Orientation: The ability to consistently produces high-quality work within established deadlines.