Assistant Manager - Internal Audit IT

Role & responsibilities

• Plan and perform field audit work in line with approved audit programs.
• Assess business risks and evaluate the effectiveness of internal controls.
• Prepare detailed working papers documenting audit procedures, findings, and evidence
• Draft audit observations, recommendations, and reports based on audit findings.
• Discuss audit findings with process owners and management to obtain responses.
• Ensure audit reports are accurate, clear, and submitted within the stipulated timelines.
• Follow up with process owners to track the implementation of audit recommendations.
• Coordinate with business units to gather necessary information and documentation.
• Support the preparation of quarterly updates for senior management.
• Identify process gaps and suggest improvements to strengthen internal controls.
• Maintain proper documentation and evidence to support audit conclusions.
• Apply ERP systems (e.g., SAP) and data analytics tools to enhance audit testing.
• Ensure independence, objectivity, and professionalism in all audit activities.
• Stay updated on regulatory changes, audit best practices, and industry standards.

Preferred candidate profile

• Minimum 1-3 years of relevant experience

• Certifications (good to have) : CISA, Lead Auditor ISO 27001 or equivalent

• Perform IT General Controls (ITGC) reviews covering:

• User Access Management

• Privileged Access Management

• Password Controls

• Segregation of Duties

• Change Management

• Backup and Recovery

• Incident Management

• IT Operations

• Conduct application control reviews for SAP and non-SAP applications.

• Review cybersecurity controls and information security governance.

• Assess third-party/vendor risk management and cloud service controls.

• Evaluate disaster recovery and business continuity preparedness.

• Conduct infrastructure, network, database, and endpoint security reviews.

• Work experience should include Big 4 or equivalent background

• Thorough understanding of the industry and its segments

Key Competencies and Skills

Technical Skills

• Internal audit methodologies and standards (IIA)
• Risk assessment and internal control evaluation
• ERP systems (e.g., SAP) and data analytics tools
• COBIT, ITIL, NIST cybersecurity framework knowledge
• Financial, operational, IT and compliance audits
• Audit documentation and report preparation
• Understanding of regulatory frameworks (VAT, Corporate

Tax, AML/CFT etc., as applicable)

Soft Skills

• Effective communication (verbal and written)
• Problem-solving and critical thinking
• Collaboration and crossfunctional coordination
• Stakeholder management and relationship building

Behavioural

• Professional integrity and ethical conduct
• Objectivity and independence in audit work
• Attention to detail and accuracy
• Adaptability to multi-location audits and changing priorities
• Professional skepticism
• Continuous learning orientation.