About this role
Our employees are our company's greatest asset - they are our real competitive advantage. We possesse immense power of innovation, immagination and a desire to attract and retain the best; provide them with encouragement, stimulus, and make them feel that they are an integral part of the company's mission.
Purpose
Perform audit assurance, review and or consulting engagement for IT & CS enterprise /cloud /back-office /infrastructure /communication /DR program /backup solutions servicing user and or the IT business process function alongside, the operational-technology or OT system/solutions (to manage power generation, transmission & distribution/metering) ; Manage audit/assurance review and or extend consulting services on applied e-controls and or operational process adequacy and efficiency; Support the Manager IT & CS Audit in assessment of internal control environment, compile audit/advisory engagement’s significant findings, draft report and engage auditee for management comments; plan & manage engagement follow-ups. These responsibilities are carried out WITH the objective to implement the processes for the Audit Universe WITHIN the limitations of IIA methodology, the IA manual, the IT audit service-edict, referred IS audit standards / NIST frameworks / SAP best practices and as per guidelines from the immediate supervisor and line management
Education (Mandatory)
BS/ BE in Computer Engineering OR Computer Science OR IS, CS or DS preferred from a HEC recognized university
Years of Experience
4-6 years of experience in IT /CS operations / audit/ software development/ systems or data communication infrastructure; Expertise in SAP & certifications (incl. but not limited to CISA, CISM, CRISC, CGIT etc.) would be a definite advantage
Functional Competencies
Area of Responsibilities
1- Audit Execution
- Plan/execute field visits, complete KYC (know-your-customer), develop hands-on on e-solutions, coordinate with auditee, run system walkthrough, explore new technology(s), understand, and capture the business process(s)
- Review and finalize business-understanding-document capturing the system/solution understanding in purview of audit engagement
- Assist line manager and the team in understanding IT/IS/CS/OT solutions, applied policy & data governance framework, threats & risks, controls on input & integration touch-point, storage and map audit data-sources
- perform/manage the ‘test-of-controls’, carry out ‘substantive-testing’ and working papers for:
-> SAP PCE, BTP, IAG, Ariba, Successfactors /ORACLE /Any-other enterprise business, analytics, mining, reporting and or warehousing solutions; developments, configuration, customizations, and change management
-> Data communication (MAN/LAN/NAC), IT systems & infrastructure services (backup, protection, retention, archiving, purging, restoration, patch management), data center facilities, back-office IT eco-system solutions
-> On-premise and off-premise/ cloud services and end-point management & NOC (network operation center)
-> IT system infrastructure and or solutions managed outside ITG
-> Information & cyber security engagements involving perimeter protection, endpoint detection and response, host-based security, antivirus/subscription services, cloud security, SOC (security operation center), Incident retainership and review (IRR), Identity & access management (IAM), Privileged Access Management (PAM), Security Incident & Event Management (SIEM)
- Develop & maintain audit/assurance findings, maintain use of CAATS tools for analytics and timely update of proceeds in the audit management solution
- Conduct, comment and prepare status report for BAC action-points to the immediate supervisor and line management
- Liaison with other IA teams on business issues, bridge IT/system understanding gaps, and manage implemented CAATS solutions for testing & infrastructure requirements
2- Consulting Activities
- Assist immediate supervisor and the line in identifying relevant documentation and or IT/OT/CS controls, and advise on current emerging trends and how these can be applied to improve the standing business processes, utilization of available features and integration advantage
3- Administrative Activities
- Supervise and coordinate with vendor for management of CAAT tool, eAudit solution
- And manage/support/prepare case and use of business/IA analytic & intelligence tools
4- People Management
- Identifies & plan training requirements for IT/OT/CS Audit section; impact resource performance management; Manage people development, career planning and engagement function - Handle administrative issues including coordinating with HR BP for interview alignment, leaves, and other issues; Provides guidance to the direct reports as and when required
KE provides equal employment opportunity (EEO) to all persons regardless of age, color, origin, physical or mental disability, race, religion, creed, gender, marital status, status with regard to public assistance or any other characteristic protected by federal, state or local laws.
Women and persons with disabilities are encouraged to apply. Role suitability for PWDs will be assessed in accordance with HSE standards.