Senior Internal Audit Specialist

General Objective

Audit Planning and Execution

• Analyze and update the audit universe and prepare a risk-based annual audit plan based on risk assessments and approved performance indicators.
• Conduct planned, periodic, and surprise internal audits, analyze results, and provide feedback to the internal audit office and relevant organizational units.
• Audit compliance with laws, policies, procedures, regulations, and approved corporate governance systems.

Reporting and Follow-up

• Prepare audit reports covering significant findings and recommendations and submit them to the direct supervisor.
• Review responses from organizational units to financial control authority observations and prepare draft technical responses within required deadlines.
• Follow up on corrective and preventive actions arising from internal audit reports and submit periodic progress reports.
• Prepare monthly and annual reports comparing achievements with performance indicators and identifying obstacles and recommendations.

Financial and Operational Audit

• Audit selected samples of budget execution, account reconciliations, financial statements, expenditures, and supporting documents.
• Assess the efficiency and effectiveness of financial and operational resource use and report recommendations.
• Collect, analyze, and summarize operational information and trends related to departmental activities.

Technology and Security Audit

• Assess information technology internal controls, including control design, effectiveness, risk exposure, and remediation strategies.
• Examine departmental technology systems and report weaknesses and security issues in networks, applications, and systems.
• Assess cybersecurity and information-security control systems and technology and information-security project change-management processes.

Risk and Advisory Work

• Prepare, analyze, and update enterprise, operational, internal-audit, and information-security risk registers.
• Evaluate risks related to departmental processes and recommend mitigating controls and actions.
• Review authority-matrix guidance, provide specialist audit advice, and transfer technical knowledge to employees.

Education and Experience

• A degree in administrative sciences, industrial engineering, or a related specialization is required.
• Required similar experience is one year for a bachelor's degree, nine years for a master's degree, or six years for a doctorate.

Additional Qualifications

• Additional professional certifications may include CBCP, MBCP, or CBCI and credentials related to cyber resilience, business continuity, crisis management, incident response, or information technology disaster recovery.

Compensation

• The listed monthly salary range is 30001-40000.

Schedule

• The schedule is full time.