IT Internal Auditor

About the role

We are looking for an experienced IT Internal Auditor to evaluate the effectiveness of our information technology controls, identify risks, and support continuous improvement of IT processes. The role combines hands‑on data analytics using ACL with a deep understanding of IT general and application controls.

Key responsibilities

• Plan and execute IT audits based on risk assessments and business objectives.
• Evaluate IT General Controls such as access, change, operations, backup, and security.
• Assess application controls and business processes to uncover gaps and risks.
• Use ACL to extract, analyze, and validate large data sets, developing scripts for testing exceptions, duplicates, and unusual transactions.
• Perform continuous auditing and data‑analytics to detect trends, anomalies, and potential risks.
• Review user access, segregation of duties, privileged access, and system activity logs.
• Test data completeness and accuracy, document procedures, findings, and recommendations.
• Prepare clear audit reports and communicate results to management and stakeholders.
• Track remediation actions and conduct follow‑up testing.
• Support compliance audits for frameworks such as COBIT, ISO 27001, PCI DSS, and other regulatory requirements.
• Collaborate with internal audit, information security, risk, compliance, and IT teams.

Required profile

• Bachelor’s degree in IT, Computer Science, Accounting, Finance or a related field.
• Experience in IT auditing, internal auditing, technology risk, or information security.
• Practical experience using ACL for audit data analysis.
• Strong understanding of IT General Controls and application controls.
• Knowledge of risk‑based audit methodologies and internal control frameworks.
• Excellent analytical, documentation and communication skills.
• Preferred certifications: CISA, CIA, CRISC, ISO 27001 or similar.

Required skills

• ACL (Audit Command Language) for data extraction and analysis.
• Data‑analytics techniques for large‑volume data testing.
• IT General Controls (access, change, operations, backup, security).
• Application control assessment.
• Risk‑based audit methodology.
• Familiarity with COBIT, ISO 27001, PCI DSS frameworks.