Information Technology Internal Auditor

About The Role

Responsibilities

• Execute IT audit engagements covering IT governance, cybersecurity, project management, ERP systems and applications, IT operations, infrastructure, and emerging technologies, in accordance with NMDC Group’s audit policies and procedures, applicable international standards (including CIS, NIST, COBIT, ISO, OWASP, SANS), and agreed time budgets, while ensuring effective use of relevant audit frameworks, tools, and software.
• Assess IT controls, systems, platforms, architectural designs, and functionalities to identify risks, threats, and control gaps, and leverage this assessment to design appropriate audit testing procedures.
• Review and analyse complex data sets, systems, and processes to identify control weaknesses, assess the significance and impact of identified issues, and develop practical, risk-based recommendations for improvement.
• Perform and support advisory and consulting engagements at the request of business units or as directed by the Group Internal Audit Director.
• Support the Internal Audit & Data Analytics Team Leader in conducting IT risk assessments to establish the IT Audit Universe and develop the annual IT Audit Plan.
• Assist the IA&DA - TL with departmental initiatives and projects, including internal audit strategic initiatives, development and implementation of the IT Internal Audit strategy, continuous control monitoring, and data analytics activities.
• Contribute to the preparation of Audit Committee presentations, audit status updates, and management reports.
• Provide support for the maintenance and effective utilization of the Audit Management System (AMS), ensuring alignment with Group Internal Audit procedures and supporting internal audit staff as required.
• Identify and help define department technology requirements to advance automation, data analytics, and AI in audit activities, while understanding assigned functions and operations to assess control adequacy, resource efficiency, and opportunities for profit or cost-effective improvements.
• Conduct research, analysis and benchmarking for the process under review.
• Participate in the development of audit planning documents such as audit scope, process understanding, audit program, etc., to ensure all risks are identified and are addressed in the plan.
• Utilise Internal Audit System during the conducts of audit as required.
• Identify sufficient, factual, reliable, relevant and useful information to achieve the audit objectives.
• Perform testing of internal controls to ensure the design is effective.
• Ensure that sufficient documentation is gathered in order to understand the audited business process.
• Prepare and adequately maintain working papers, which record and summarize data on the assigned audit areas and the results of the audit examination.

Qualifications

Required Skills

• Strong understanding of IT governance and cybersecurity frameworks.
• Experience in conducting IT audits and risk assessments.
• Proficiency in data analysis and audit management systems.

Preferred Skills

• Familiarity with emerging technologies and their impact on audit processes.
• Experience in automation and data analytics in audit activities.