INTERNAL AUDIT DEPARTMENT

 SENIOR INTERNAL AUDITOR II (INFORMATION SYSTEMS AUDITOR) GRADE 12N  POST:1   REF: TUM/ADVERT/EXT/RECR/1/SIA/S/ 2025

Reporting To: Chief Internal Auditor

Professional Requirement

1. Must possess a Master degree in Accounting/Finance/Computer Science/ Information Technology or a relevant field from an accredited/recognized institution;
2. Must possess CPA Part II or equivalent;
3. Must possess at least three (3) years relevant experience as an Information Systems Auditor at Grade 11N OR comparable duties and responsibilities.
4. Must be a Certified Information Systems Auditor (CISA).

OR

1. Must possess a Bachelor degree in Accounting/Finance/Computer Science/ Information Technology or related field from an accredited/recognized institution;
2. Must possess CPA (K) or equivalent;
3. Must possess at least three (3) years relevant experience as an Information Systems Auditor at Grade 11N OR comparable duties and responsibilities.
4. Must be a Certified Information Systems Auditor (CISA).

 Duties and Responsibilities

1. Design and implement comprehensive annual audit programs encompassing both financial and information systems reviews.
2. Oversee the audit schedule to ensure assignments are completed on time and in    accordance with plan.
3. Evaluate the design and operating effectiveness of internal controls to support business objectives.
4. Conduct risk-based audit engagements, identify control deficiencies, and propose actionable enhancements.
5. Verify compliance with applicable legislation, regulatory requirements, internal policies, and professional auditing standards.
6. Continuously refine audit methodologies to reflect changes in best practices and regulatory mandates.
7. Assess the robustness of controls within IT environments—including cybersecurity measures, data-protection protocols, and change-management processes.
8.   Review and advise on IT governance policies, procedures, and third-party  agreements.
9. Perform vulnerability assessments and penetration testing, and evaluate incident-   response preparedness.
10. Monitor emerging information-systems risks, offering expert guidance on mitigation strategies.
11. Provide support during security incident investigations and contribute to threat-response initiatives.
12. Stay abreast of developments in audit methodologies, information-systems technologies, and cybersecurity trends.
13. Draft and present clear, concise audit reports—highlighting findings, recommendations, and remediation plans—to management and key stakeholders.
14. Track the implementation of agreed-upon remedial actions to ensure effective  resolution.
15. Prepare detailed documentation for presentation to the Board Audit Committee.
16. Support the enterprise risk-management function by providing tech