IT Internal Auditor

About the role

The IT Internal Auditor will evaluate and ensure the effectiveness of the university’s IT controls, systems, and security measures. This role involves assessing IT risks, ensuring compliance with regulations and industry standards, and recommending improvements to IT governance and security.

Key responsibilities

• Conduct risk‑based IT audits to assess the adequacy of controls, cybersecurity measures, and data protection practices.
• Evaluate IT systems, applications, and networks for compliance with internal policies, regulatory requirements, and best practices.
• Assess controls over IT operations such as system development, change management, user access, and disaster recovery.
• Review cybersecurity measures including vulnerability assessments, penetration testing, and incident‑response preparedness.
• Prepare detailed audit reports with findings, risks, and actionable recommendations, and follow up on corrective actions.

Required profile

• Bachelor’s degree in Information Technology, Computer Science or a related field.
• Professional certifications such as CISA or CISSP.
• 3‑5 years of experience in IT auditing, cybersecurity, or IT risk management.

Required skills

• Knowledge of IT general controls and IT governance frameworks.
• Proficiency with audit tools, data analytics, and IT risk assessment methodologies.
• Experience conducting vulnerability assessments and penetration testing.
• Understanding of incident‑response processes and data protection regulations.
• Ability to produce clear audit reports and communicate findings to stakeholders.