System Audit Officer

Job Description

JOB CONTEXT

• Internal Audit (IA) is the third line of defence and provides independent risk assurance to the management ensuring that set goals and objectives are achieved. Today internal audit must be dynamic and adaptable to the changing business environment and be able to assess risk in a way that is relevant to Management in conformity with relevant professional standards and best practice for internal audit.
• Deliver on assigned audits jobs and ensure they are carried out in line with the required standards.
• Review and evaluate the soundness and adequacy of administrative, procedural and automated controls, security practices and ‘auditability’ of IT systems, with special emphasis on confidentiality, integrity and availability of information systems and data.
• Perform IT assurance functions and assist in the identification and assessment of risks and vulnerabilities inherent in IT infrastructures, systems, processes and procedures in the bank.
• Ascertain that all approved IT policies; standards, procedures and guidelines are complied with Bank-wide.
• Evaluate the soundness, adequacy and application of administrative and procedural standards and security practices of the Data Center.
• Assess how Computer resources are applied to ensure they are directed to Management goals, promote business objectives and used in a cost-effective manner.
• Make recommendation on controls improvement and measures that will mitigate identified risks in the bank’s Technology space and ensure compliance with the bank’s policies, procedures, standards and regulatory requirements.
  
  

Key Responsibilities

Responsibility 1 - Audit engagement and planning

• Review/develop audit programs/checklist covering areas assigned by the team lead.
• Engage process owners professionally in the conduct of audit exercise.
• Carryout audit of specific areas as assigned by the Team Lead.
• Perform risk analysis, control testing and documentation of results during fieldwork.
• Ensure coverage of audit scope according to the approved audit program
• Execute audit of various systems including Operating System, Database, Business Applications, network and communication security, IT general controls, etc in accordance with the annual IS audit plan.
• Ensure use of CAAT (Computer Assisted Audit Techniques) tool team where available for the audit.
• Raise audit observations for review of team lead before sending to the auditee.
• Ensure use of (AIMS) Audit Issues Management Systems for the audit.
• Generate draft audit report as assigned by the Team Lead for review.
• Assist to follow up on audit findings to ascertain the status of issues reported.
  
  

Responsibility 2 – Audit Execution and Reporting

Responsibility 3 – Working paper (WP) management.

• Audit evidence gathered are relevant, reliable and sufficient.
• Maintain appropriate work paper for areas covered during audit fieldwork.
  
  

Responsibility 4 - Data Analytics, Audit Process Automation and support

• Search the CBA and respond promptly to Garnishee request from the Legal department.
• Develop and maintain audit automation procedures to support and facilitate internal audit/inspection function.
• Provide data analytics support and technical expertise to the rest of Internal Audit Group (IAG).
  
  

Responsibility 5 – Other/general Activities

• Perform other assignments that may be assigned from time to time.
  
  

JOB PROFILE

Qualifications

Minimum of 2nd class lower in Computer Science, Accounting or any other related first degree /equivalent. (MBA, MSC, MA, ML and/or Professional Qualifications is an additional advantage)

Experience

Minimum of 2 - 3 years working experience in similar function

• Knowledge of Information Systems audit practices.
• Expertise in Data analysis.
• Information Technology (Business perspective, IT management).
• Project management.
• Product knowledge.
• Knowledge of basic banking operations.
• Knowledge of risk assessment and control.
• Ability to work with minimum supervision.
• Maintain confidentiality and protect the privacy of sensitive data extracted for audit purposes and reporting.
  
  

Skills

• Articulate
• Analytical skills.
• Technology awareness.
• Strong interpersonal skills
• Communication (oral & written) skills.
  
  

Capabilities

• Knowledge of banking operations, audit, products & customer segmentation
  
  

Personal attributes

• Paying attention to details
• Honest, punctual, trustworthy and very hardworking
• Always ready to add value to the system.

---