IT Auditor

Company: Confidential

Location: Tanzania

Application Deadline:

---

Qualifications

• Bachelor’s degree in information technology, computer science, or a related field
• Certified Information Systems Auditor (CISA) - highly desirable
• Certified Information Security Manager (CISM)
• Certified Internal Auditor (CIA)

---

Competencies

• Minimum of 5 years’ experience in IT auditing, risk management, cybersecurity, or internal controls
• Experience in auditing ERP systems, database security, and IT infrastructure

---

Responsibilities

• Assess and evaluate the adequacy and effectiveness of internal controls for IT systems
• Perform reviews of system development standards, operating procedures, and system security
• Ensure compliance with legal, regulatory, and internal policy requirements
• Execute audit activities in line with the audit plan approved by the board audit committee
• Lead audit entrance meetings to define objectives, scope, timelines, and required information
• Prepare audit discussion memos (ADM) with confirmed observations and root cause analysis
• Conduct closure meetings to finalize reports with auditee input and ensure action plans address identified gaps
• Develop final reports for Chief Internal Audit review and circulation to management
• Optimize the use of internal audit tools and systems
• Foster collaboration by maintaining effective communication within the internal audit function
• Provide guidance and mentorship to colleagues and junior staff
• Drive remediation of risk management exceptions
• Develop and execute risk-based audit plans focusing on IT risks, cybersecurity, and emerging threats
• Assess cybersecurity frameworks, data privacy controls, and IT governance mechanisms
• Identify and mitigate fraud risks in IT systems
• Provide advisory support on IT governance and regulatory compliance
• Implement and optimize continuous auditing and data analytics for real-time risk monitoring
• Evaluate IT risks associated with third-party vendors and cloud computing solutions
• Review incident response, business continuity, and disaster recovery strategies
• Assess risks associated with emerging technologies
• Collaborate with IT, compliance, and risk management teams
• Conduct training and awareness programs on IT risk management and cybersecurity

---