Job Description

The Focus Group Sandton, South Africa 15 September 2025 Mid 420000 - 540000 Full Time Market Related 2 years - 5 years Skills Control Policies Corporate Governance Database Information Technology (IT) IT Audit IT Infrastructure Leadership Risk Management Security Information and Event Management (SIEM) Time Management Industries Financial Services Information Technology (IT)

OUR CLIENT



One of the largest financial services JSE listed companies, with a number of business verticals, offer a fast-paced and dynamic environment which enables smart, self-driven people to be their best.

JOB PURPOSE

The position sits in the Group Audit Division, responsible for the IT Auditing of the various business verticals within the IT Audit Methodology. You will be responsible for: Building and maintaining relationships with the various business verticals as well as their partner Assurance providers; Facilitating the maintenance of risk profiles (inherent and residual view of IT risks); challenging risk management information and providing meaningful inputs to management on where IT risk management processes and controls can be improved.

THE SUCCESSFUL CANDIDATE'S SKILLS AND EXPERIENCE

As the successful candidate, you will have not only the skills and experience to achieve the above job purpose, but the passion for building a career in Internal Audit with short-to-medium term focus on IT Audit specialization. You will also bring with you and possess:

B Degree or equivalent (and relevant) qualification with majors in Computer Science, Computer Auditing, Information Systems, or Auditing

CIA, CISA, CISM, CRISC, or CGIT (at least one required)

2+ years of audit experience with a specific focus on IT Audit, including IT general control reviews, application control reviews, Risk Management Framework (COSO), IT Governance, CAATs, and Cyber and Information Security

Risk Management Frameworks (COSO)

IT General Control reviews

Application Control reviews

Internal controls

Corporate and IT governance

IT Infrastructure technical knowledge (reviewing of databases and operating systems)

CAATs / data analytics

Cyber and information security