IT Audit Manager at Forvis Mazars Group

Job Description

• Forvis Mazars Gauteng is currently recruiting for an individual to join their IT Audit Department within the Audit and Advisory function, specifically for the role of IT Audit Manager. The primary responsibility of the successful candidate will be to manage and execute a range of audits including IT General Controls Review, Data Privacy Reviews, IT Maturity Assessment Reviews, IT Governance Reviews, Business Continuity and IT Disaster Recovery Audits, Cyber Security Reviews, and ISAE 3402/SOC2 Type I & Type II Reviews

Duties and Responsibilities

• Manage and execute IT General Controls Review, Data Privacy Reviews, IT Maturity Assessment Reviews, IT Governance Reviews, Business Continuity and IT Disaster Recovery Audits, and Cyber Security Reviews, including ISAE 3402/SOC2 Type I & Type II Reviews.
• Develop comprehensive audit plans based on risk assessments and regulatory requirements.
• Lead IT audits to assess controls, identify weaknesses, and evaluate compliance with policies and procedures.
• Supervise and mentor a team of IT auditors, providing guidance in audit methodologies and technical skills.
• Prepare clear, concise audit reports detailing findings, recommendations, and management responses.
• Present audit results to senior management, audit committees, and stakeholders.
• Track audit findings and ensure timely resolution of identified issues.
• Collaborate with stakeholders to identify and prioritize IT risks.
• Monitor industry trends, regulatory changes, and best practices in IT auditing.
• Implement continuous improvement initiatives in audit methodologies, processes, and tools.
• Recommend strategies and controls to mitigate risks and enhance IT security and compliance.
• Attend and present at IT Audit Risk Committees.
• Conduct preliminary reviews of systems and process walkthroughs.
• Document and flowchart business processes and systems.
• Provide feedback to Audit Directors and Associate Directors, escalating problems promptly.
• Manage audit relationships with Internal Audit Senior Management and Clients.
• Provide technical expertise and advice on Information Technology and IT security-related issues.
• Responsible for managing team timesheets, budgets, and Work in Progress (WIP).
• Responsible for deliverables and feedback to Senior Managers, Associate Directors, and Directors.
• Attend and participate in Audit kick-off meetings and wrap-up meetings as requested.
• Prepare audit files with standard information.
• Execute audit programs and record work done.
• Prepare audit reports with findings and recommendations to address root causes.

Minimum Requirements
Candidate requirements

• Relevant IT Degree/BCom with information systems/BSC Computer Science majors
• Post Graduate IT Degree/BCom with information systems/BSC Computer Science majors would be advantageous.
• ISACA related certification/s (CISA, CISM, CGEIT, CDPSE, CRISC, CISSP, CSX-P)
• Proven experience (typically 5-8 years) in IT auditing, risk management, or related field, including at least 2 years in a supervisory or managerial role
• Strong understanding of IT governance frameworks (e.g., ISO 27001, COBIT), audit methodologies, and regulatory requirements (e.g., POPIA, NIST, ISO 22301)
• Excellent analytical skills, attention to detail, and ability to interpret complex technical information
• Effective communication and interpersonal skills, with the ability to influence and collaborate with stakeholders at all levels
• Demonstrated leadership capabilities, including team management, coaching, and development
• Adherence to principles and values
• Writing and reporting skills
• Information gathering and problem analysis skills
• Sound judgment, planning, and organizational skills
• Ability to work under pressure
• Strong teamwork skills
• Results-driven with the ability to achieve work goals and objectives

General Competencies

• Experience in leading and managing a team of IT auditors, including performance evaluation and professional development.
• Skills in planning, organizing, and executing audit projects within established timelines and budgets.
• Strong time management skills with the ability to prioritise and manage competing deadlines effectively
• Demonstrated strong problem solving and interpersonal skills
• Strong interpersonal skills to engage with stakeholders across departments and levels of the organization.
• Ability to present audit findings, recommendations, and reports to senior management and audit committees effectively.
• Ability to work in an ambiguous environment
• Commitment to staying updated on industry trends, regulatory changes, and best practices in IT auditing.
• Proactive approach to implementing improvements in audit methodologies and practices.
• Ability to adapt to changing audit priorities, business requirements, and organizational dynamics.
• Capacity to handle pressure and manage multiple priorities effectively.
• Upholding ethical standards and maintaining independence and objectivity in auditing practices.