BANKIGA DHEXE EE SOOMAALIYA

CENTRAL BANK OF SOMALIA

Job Description

Post Title: Senior IT Auditor (IT Security)

Duty Station: CBS Headquarter

Expected starting date: 07-Octobar-2022

Status: Permanent

Appointment Type: Full-time

Reports to: Head of IT Audit

Supervises: None

1-  Role

Senior IT auditor will be responsible for coordinating and executing IT audits in order to test internal IT general controls, IT application controls and data center infrastructure security, evaluate the design and operational effectiveness, determine exposure to risk, and provide recommendations. The senior IT auditor focus includes coverage of all areas of Technology, including information and cyber security areas, infrastructure, platforms and applications, and governance over information technology.

2-  General Description

The Central Bank of Somali’s (CBS) main objective is to promote and maintain a safe, stable, sound, efficient and competitive financial sector. Within the Central Bank of Somalia, the Internal Audit Department’s (IAD) primary objective is to provide independent and objective assurance to the management and the board (audit committee) on risk management, controls, and governance by measuring and evaluating their effectiveness in achieving the CBS’s agreed objectives.

3-  Duties and Responsibilities

• Develop and conduct IT audit risk assessment and IT internal audit programs covering IT security, systems, applications, and IT processes and in accordance with internal audit policies, procedures, methodologies, and IPPF standards.
• Plan and execute efficient and effective IT audit testing (e.g., IT security, network infrastructure, operating systems, database and data centers) and ensure that they are timely and accurate.
• Attend entrance and exit meetings and interviews in auditee departments to ensure timely and quality audits.
• Document business processes, workflows systems of IT processes in the audit plan to ensure adequate audit coverage.
• Review the key processes, procedures, system, as well as leak of key control and processes that cause waste of resources and then recommend for improvement.
• Engage in all system and/or network security problems/breaches.
• Communicate complex IT technical issues in simplified terms to the relevant leadership and staff.
• Assists and trains other audit staff in the use of computerized audit techniques, and in developing methods for review and analysis of computerized information systems.
• Prepares written and oral reports and other technical information in a pertinent, concise, and accurate manner for distribution to management.
• Prepares audit finding memoranda and working papers to ensure that adequate documentation exists to support the completed audit and conclusions.
• Prepare working papers and audit reports for relevant audits conducted by the section to ensure that all audit findings are adequately supported.
• Appraise the adequacy of departmental responses to audit recommendations and perform post-audit reviews to determine the extent to which audit recommendations have been implemented.
• Plan, and conduct special investigations as may be assigned by Audit Management.
• Develop a risk-based test plan by selecting appropriate audit approach, test procedures and sampling criteria based on professional judgment and departmentally defined internal audit methodology.
• Any other duties that may be assigned from time to time.