IT Auditor

Job Req ID

7724

Closing Date

28 February 2025

OME

CML: Assurance 

Location

Sandton 

Purpose of Job

Execute and managed own, IT assurance activities with a focus on cyber and information security engagements (audit and advisory) within the Sasol Group in order to mitigate information management and information security risks impacting Sasol’s operations and to provide subject matter expertise. Execute on assigned audit tasks within the audit budget and within the quality requirements. Provide subject matter expertise on IT audits executed and act as a liaison with clients. Ensure timely reporting of assigned audit tasks in alignment with established reporting protocols.

Key Accountabilities

• Compile planning memorandums and audit programs, re-direct focus to high risk areas, and follow-up on meeting strategic objectives.

• Execute audits by identifying risks and weaknesses and ensuring that processes and systems comply with applicable policies, standards, statutory and regulatory requirements.

• Execute planned and ad-hoc audits in line with planned budgetary requirements and set timelines to contribute to the completion of the integrated risk based annual assurance plan (IRBAAP).

• Conduct audits to provide assurance that the internal system controls established by management to safeguard assets and liabilities of the company are adequately designed and operating effectively.

• Ensure the submission of factual and timely reports within the required reporting protocol, and integrate changes as required from stakeholder feedback.

• Ensure that all audit working papers including the evidence supporting audit report findings and results are adequately captured/ documented.

• Reviewing of audit reports and working papers as well as completion of task assessments for audits reviewed when requested by Senior Manager.

• Plan, execute and report on overseas audits, when required.

• Conduct quality peer reviews and adhere to quality improvement practices.

• Contribute to the compilation of the Quarterly activity report.

• Monitor own progress against annual audit plan, identify significant governance issues, and escalate to top management as required.

• Engage with relevant stakeholders, attend relevant stakeholder forums and provide specialist advice.

• Contribute to the development of the integrated risk based annual assurance plan.

• Keep up to date with and share knowledge in respect of new/ emerging developments in the internal audit profession and technological solutions.

• Execute/assist with non-audit activities as allocated.

Formal Education

University Bachelor’s Degree

Working Experience

Certification

A designation of Certified Information Systems Auditor (CISA) or CA(SA) is advantageous.

Required Personal and Professional Skills