IT Internal Auditor

About the role

The University of Malawi is recruiting an IT Internal Auditor. The postholder evaluates and ensures the effectiveness of the university's IT controls, systems and security measures, assesses IT risks, checks compliance with regulations and industry standards, and recommends improvements to IT governance and security.

Key responsibilities

• Conduct risk-based IT audits of controls, cybersecurity measures and data protection practices
• Evaluate IT systems, applications and networks against internal policies, regulatory requirements and best practice
• Assess controls over system development, change management, user access and IT disaster recovery
• Review cybersecurity measures such as vulnerability assessments, penetration testing and incident response preparedness
• Evaluate IT governance frameworks and compliance with data protection regulations
• Work with IT, risk management and other departments to align audit findings with business objectives
• Prepare detailed audit reports with findings, risks and recommendations, follow up on their implementation and corrective actions

Required profile

• Bachelor's degree in Information Technology, Computer Science or a related field
• Certifications such as CISA or CISSP
• At least 3-5 years of experience in IT auditing, cybersecurity or IT risk management
• Strong understanding of IT general controls
• Experience with audit tools, data analytics and IT risk assessment methodologies

Applicants must submit a cover letter stating the position applied for, copies of certificates, a detailed CV with three traceable referees, and, where available, a teaching and research agenda and publication samples, to the Registrar, University of Malawi, Zomba, by 11 April 2025. Only shortlisted candidates will be acknowledged.