Internal Auditor - Application Control Reviews at FirstRand Corporate Centre

Are you someone who can:

• Obtain a good understanding of the IT control environment being audited (including link to business processes and risk management related aspects), and the interdependencies linked to this.
• Plan audit assignments based on key process and business risks identified and design the audit program in line with risks and key IT application controls to be tested.
• Incorporate data analytics (DA) to enhance audit planning and create efficiencies in audit fieldwork.
• Execute audit field work in compliance with quality standards by following and completing prepared work programs. Assess the adequacy and effectiveness of governance, risk management practices and internal controls.
• Evaluate IT areas such as information security, operations management, and disaster recovery procedures related to the IT application controls to be reviewed.
• Provide clear and sufficient audit evidence to support recommendations and audit opinion.
• Express an opinion based on the results of the work performed.
• Identify opportunities to improve the IT internal control environment and project management processes.
• Identify and clearly articulate the root cause of issues identified and impact thereof and recommend changes to business processes that will address the IT and Project control weaknesses.

You will be an ideal candidate if you:

• BSC / BCom (Information Systems) or equivalent degree.
• At least 3 years Application Control Reviews (ACR) and / or Project auditing experience.
• Experience with data analytics/ CAATs is an advantage.
• Experience in banking and financial services environment will be an advantage.
• You will have access to:
• Challenging work in a complex and exciting environment
• Opportunities to innovate and create efficiencies.

We can be a match if you are:

• Curious & courageous - you're driven by always wanting to know more and learn more and you're brave enough to
• Obsessed with mastery - you know what it takes to become good at what you do and are constantly pushing yourself to do it.
• Have a general understanding of different risk types.