Senior Lead - Technology Audit.Internal Audit and Fraud Management
Full Job Description
Reports To: Manager Technology AuditDivision: Internal Audit & Forensic ServicesMission:Manage or conduct Technology, IT Security and Network Audit projects and consulting services relating to governance and risk identification for both MTN management and staff in order to review the goals, objectives and impact of a variety of economic, financial, operational and managerial programs in conformance with company policy and procedures, Group Internal Audit methodologies and IIA standards of professional practice.Description:Create a holistic picture of each project to provide context for the findings, and implement procedures as required to perform Technology, Security, and Networks auditsManage expertise and resource planning and requirements for Technology, Security and Networks Audit assignments, special assignments, and management requestsManage the audit assignments’ progress and escalate any roadblocks to completion to the Senior Manager for intervention and resolutionEnsure that IA methodology as prescribed by Group Internal Audit is strictly adhered to, including identifying and defining issues, developing criteria, reviewing and analysing evidence, and documenting Technology, Security and Networks processes and proceduresOversee and manage the work of the audit staff in conducting interviews, reviewing documents, developing and administering audit surveys, composing summary memos, and preparing working papers or audit operationsImplement the audit program, recognise control weaknesses, assess the materiality of these weaknesses, and relate them back to the scope and objectives of the auditReview the audit programs to ensure the appropriate testing mechanismsReview and manage the work of the audit staff in identification, development, and documentation of audit issues and recommendations for improvement, as guided by Senior Manager Technology, Security and NetworksDevelop recommendations for bringing programs and operations into compliance with goals and objectives and write up reports to document findingsCommunicate the results, findings and recommendations of audit projects through written reports and face-to-face presentations on a timely basis to the Senior Manager: Financial and Operational AuditEnsure that the audit is carried out on the eGRC system in line with process and methodology as mandated by the Group Internal Audit and Forensics functionFollow up on the implementation of audit recommendations in a timely mannerPerform control adequacy and effectiveness reviews of business processesInteract with staff, Audit Managers, General Managers, BRM consultants, and when necessary, with Executive Management to obtain and/or communicate relevant information to achieve the objective/s of the Technology, Security and Networks Audit functionMaintain all MTN and professional ethical standards and ensure internal audit activities are carried out in compliance with The International Standards for the Professional Practice of Internal Auditing (Standards) and IIA Code of EthicsSupport the Senior Manager: Technology, Security and Networks in coordinating with the External Auditors where needed and facilitate their fieldwork within MTNReport on an ad-hoc basis on specific projects as and when necessaryOversee and coordinate all technical activities, the activities of direct reports and ensure all transaction and administrative documentation is recorded and available for business use.Continuously seek self-professional development to sharpen skills and capabilities in a versatile and evolving digital landscape. Education:First degree in a numerate discipline (Preferably BSc Electrical/ Electronics, Computer Engineering, Telecommunications, or Computer Science with strong predilection for engineering; or in any Systems oriented discipline)Fluent in EnglishMSc or MBA in relevant field will be an added advantageCertification:Certifications related to Auditing - Certified Information Systems Auditor (CISA) is requiredCertifications related to Cloud, Cyber or Technology Operations, such as Cloud provider certifications, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM)COBIT, CRISC, ISO 27001 LA, ITIL will be an added advantageExperience:3-7 years’ experience which includes;Minimum of 3 years’ experience in an area of specialisation; with experience in supervising othersExperience working in a large organizationExperience in internal audit function (with focus on Systems Audit) in a Systems/ IT/ Telecomm environmentWorked across diverse cultures and geographies advantageousKnowledge of IT audit management Project managementKnowledge of data science and analytics is vitalInformation technology experience such as operations, software delivery, access management, microservices, cloud infrastructure, Artificial intelligence etcInformation security experience such as application security, network security, cybersecurity, data protection etcKnowledge of technical infrastructure, operating systems, networks, databases, GSM networks, firewalls and systemsUnderstanding of commonly used internal control frameworks, including COBIT, ISO 27001, ISO 20000, ISO 22301, NIST Cybersecurity Framework, ITIL, etc