Head, IT and Systems Audit

Job Purpose:- The Head, IT and Systems Audit is responsible for providing independent assurance on the effectiveness, security, reliability, and governance of the Group's information technology environment, systems, applications, and technology-related controls across subsidiaries and business units. The role leads the planning and execution of risk-based IT audits to assess IT governance, cybersecurity, systems controls data integrity, technology operations, and compliance with Group policies and applicable standards.

Main Duties and Responsibilities

Key Responsibilities:

1. Group IT Audit Strategy and Planning:
2. • Develop and implement the Group-wide IT and Systems Audit strategy aligned with business objectives technology risks, and the internal audit charter.
   • Prepare risk-based annual IT audit plans covering Group companies, subsidiaries, business applications,infrastructure, and technology processes.
   • Identify emerging IT risks arising from digital transformation, cloud adoption, cybersecurity threats, and technology changes
   • Establish IT audit methodologies, standards, procedures and quality requirements.
3. IT Governance and Management Audit:
4. • Assess the effectiveness of IT governance structures, policies, and decision-making processes across the Group.
   • Review alignment between IT strategies and business objectives
   • Evaluate IT resource management, technology investments, and IT service delivery performance.
   • Assess the effectiveness of IT policies, procedures, and governance frameworks.
5. Information Systems and Application Audit

• Lead audits of enterprise systems, business applications, and critical information systems.
• Evaluate application controls, including:
• User access management
• Segregation of duties
• System configuration controls
• Data processing accuracy
• Change management controls
• System interfaces and integrations
• Review ERP systems and other critical business applications to ensure reliability, security, and operational effectiveness.

4. Cybersecurity and Information Security Audit:

• Assess the effectiveness of cybersecurity controls policies, and practices.
• Review information security governance, identity and access management, and security monitoring processes
• Evaluate controls related to data protection, vulnerability management, incident response, and cyber risk management.
• Provide assurance on the adequacy of controls designed to protect the Group's information assets.

5. IT Infrastructure and Operations Audit:

• Lead audits of IT infrastructure, including:
• Networks
• Servers
• Databases
• Cloud environments
• Data centers
• IT service management processes
• Evaluate system availability, performance, reliability, and operational controls.
• Review backup, disaster recovery, and business continuity arrangements.

6. Data Management and Analytics Audit:

1. • Assess controls over data governance, data quality, data ownership, and data integrity.
   • Review data management practices within enterprise systems.
   • Evaluate controls over financial, operational, and business-critical data.
   • Promote the use of data analytics to improve audit coverage and identify control exceptions.

7. IT Risk Management and Internal Controls:

• • Assess technology-related risks across Group companies and recommend appropriate mitigation measures.
  • Evaluate the effectiveness of IT internal controls and identify weaknesses.
  • Review compliance with Group IT policies, regulatory requirements, and industry standards.
  • Monitor significant IT risks and communicate critical issues to senior management.

8. Audit Execution, Reporting, and Advisory:

• • Oversee IT audit engagements from planning through reporting.
  • Review audit findings, root causes, risk impacts, and recommendations.
  • Present significant IT audit issues to Group management, Audit Committee, and relevant governance bodies.
  • Provide advisory support on technology initiatives while maintaining audit independence.

1. Subsidiary and Group Oversight:

• Conduct IT audits across subsidiaries and business units to ensure consistent application of

1. Group technology standards.

• Identify opportunities for standardization, efficiency improvement, and risk reduction.
• Evaluate the maturity of IT controls across Group entities.
• Provide consolidated reporting on IT risks and control maturity across the Group.

1. Audit Follow-up and Continuous Improvement:

• Monitor implementation of IT audit recommendations
• Track remediation of significant findings and recurring control weaknesses.
• Report unresolved IT risks to appropriate governance forums.
• Continuously improve IT audit approaches ,tools. And methodologies.e IT audit approaches tools, and methodologies.

12. Leadership and Team Management:

• Collaborate and Support Corporate Technology department in coaching, and developing IT audit professionals.
• Allocate audit resources effectively across Group entities and technology areas.
• Promote professional standards, ethical conduct, and continuous learning.

Qualification and Skills

Education:

• Master's degree (preferred) or Bachelor's degree in Information Technology, Computer Science, Information System, Software, Computer Engineering or any other relevant fields (with strong IT & Systems audit experiences).

Experience:

• A minimum of 7 years for a Master’s degree and 9 years for a Bachelor's degree with progressive professional experience in IT Audit, Information System Audit, It Controls, Information Security Assurance or related functions and with at least two and three years supervisory roles respectively.
• Experiences in auditing large capital projects set ups,in a diversified business portfolios such as Agricultural sector including farm operations and livestock development, Construction projects, Manufacturing, logistics, export and import trading are desired.

Professional Competencies Required

• Practical experience in IT auditing, IT governance and information systems controls.
• Proven ability to plan and execute risk-based IT audits covering ERP systems.
• Practical expertise in auditing ERP systems, preferably MS Dynamics 365
• Strong knowledge of IT General Controls,
• Good report writing, presentation and communication
• High professional integrity and confidentiality