Direct message the job poster from Auditor-General of South Africa
Overview
Senior Manager : IT Audit (Cyber Security)
Responsibilities
- Manage the effective and timeous cybersecurity audits of public sector Information Technology (IT) systems, thereby ensuring a service is provided to the people of South Africa in terms of relevant laws and regulations.
- Implement the business unit’s strategic objectives by managing a portfolio of audits through the effective and efficient allocation of resources, management, stakeholder management and coordination of people to perform quality, effective and timely audits.
- Strategic Function : Provide input into the strategic objectives to assist in establishing the strategic direction of the Business Unit (BU).
- Strategic Function : Facilitate the implementation of the Business Unit and Specialised Audit Solutions (SAS) strategic plans in accordance with policies, procedures and legislation.
- Strategic Function : Manage teams to ensure alignment to the vision, mission, strategic goals and values of the Auditor-General of South Africa (AGSA or Auditor-General).
- Strategic Function : Provide feedback on implementation / achievement of strategic objectives to the relevant stakeholders.
- Strategic Leadership & Innovation : Ensure the effective execution of cybersecurity audits.
- Strategic Leadership & Innovation : Drive innovation, efficiency, and effectiveness in the cyber audit space.
- Strategic Leadership & Innovation : Identify emerging risks, leverage new audit techniques, and enhance audit methodologies to strengthen the AGSA’s cybersecurity assurance.
- Thought Leadership & Brand Building : Position AGSA as a cybersecurity audit leader, both locally and internationally.
- Thought Leadership & Brand Building : Contribute to knowledge-sharing platforms and engage at all levels.
- Thought Leadership & Brand Building : Collaborate with INTOSAI and other key stakeholders to shape the future of cybersecurity audit excellence.
- Product Management : Manage Audits across the three audit phases (Planning, Execution, Reporting) and liaise with auditees for advice and recommendations.
- Product Management : Initiate and lead meetings with the audit team regarding direction and progress; provide guidance to managers on audit matters; ensure risks are addressed (e.g., appointment of specialist staff, contractual arrangements).
- Product Management : Conduct audit team visits to review work, finalise the audit, and conclude working papers; attend meetings with the team and auditees.
- Product Management : Provide motivation and training on auditing matters to team members; engage with contracted out partners; project manage all projects for timely delivery and quality.
- Product Management : Perform functions as required by an engagement manager as per ISA and AGSA policies; prepare and present materials; report to audit steering and audit committees on planning, execution and reporting; manage audits within the allocated time frame and in compliance with policies and legislation.
- Stakeholder Management : Ensure clear understanding of auditees’ business requirements through stakeholder engagement and translate into deliverables; build collaborative relationships with internal and external stakeholders; share information and recommendations for improvements; promote the AGSA brand and reputation.
- Participate in Business Unit Leader / Deputy Business Unit Leader discussions on issues arising from audits, focus areas, financial issues, compliance concerns, and resourcing matters.
- Manage Internal and External Relationships : engage with regularity audit proceedings; debrief on previous year’s audits; coordinate across planning, execution and reporting; liaise with BU and portfolio colleagues; engage with audit firms and attend SCOPA and portfolio committee meetings as invited.
- People Management : implement BU People Plan activities; manage team performance; contribute to transformation / culture plans; mentor staff; participate in talent attraction and training administration; cascade strategic alignment; foster an inclusive culture and employee wellbeing; determine and secure HR requirements to meet targets; manage performance contracts and development plans; conduct coaching, reviews and one-on-one sessions; contribute to talent management to drive high performance.
- Financial and Operational Management : compile and manage the centre budget and ensure adherence to financial performance standards; ensure compliance with internal processes; manage supply chain and other financial requests.
Qualifications & Experience
Formal Education : Minimum qualification of NQF Level 7 (e.g., 4-year Bachelor’s Degree / post-graduate Diploma) such as B Com with auditing / IT specialization.Certified Information Systems Auditor (CISA) or equivalent.AND : At least one of the following certifications : Offensive Security Certified Professional (OSCP) or CEH; Certified Incident Handler (ECIH / GCIH) or equivalent (e.g., CRIA).Experience : Minimum of 8 years’ experience post-qualification with at least 4 years in a manager / middle management role; extensive experience in managing cybersecurity and network security audits; experience in conducting cybersecurity maturity assessments using frameworks such as NIST CSF, ISO 27001 / 2, CIS, COBIT; strong ability to position insights and control recommendations in the Southern African context.NB
NB : Please note that only shortlisted candidates will be contacted. If you do not hear from us within four weeks, please consider your application unsuccessful.
Additional Information
Seniority level : Mid-Senior levelEmployment type : Full-timeJob function : Information Technology, Accounting / Auditing, and ManagementIndustries : Computer and Network Security, IT Services and IT Consulting, and IT System Testing and EvaluationLocation notes : Pretoria, Gauteng, South Africa; Centurion, Gauteng, South Africa; Johannesburg Metropolitan Area (as referenced in the original posting)
#J-18808-Ljbffr