Hybrid IT Audit Manager

at Onafriq

• Job title: IT Audit Manager
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Cloud, Cyber Security, ERP
• Location requirements: Hybrid, Sandton, South Africa

About the role

• IT Audit Manager leading risk-based IT audits for an omnichannel fintech solution provider. Responsible for assessing IT governance, controls, and cybersecurity across operations in Africa.

Responsibilities

• Execute on a risk-based IT audit plan aligned to the organisation’s risk assessment and Internal Audit strategy
• Lead and manage end-to-end IT audit engagements, including planning, fieldwork, reporting, and follow-up
• Perform audits across key systems such as ERP, core business applications, cloud platforms, and third-party environments
• Evaluate the design and operating effectiveness of IT General Controls (access management, change management, IT operations), Application controls, Cybersecurity and information security controls, Data protection, governance and integrity
• Assess IT governance structures and alignment with King IV, COBIT, ITIL, ISO 27001, and organisational policies
• Review compliance with applicable legislation and regulations, including GDPR and relevant industry requirements
• Evaluate technology risks associated with digital transformation, system implementations, and outsourcing arrangements
• Engage with senior management, IT leadership, and business stakeholders to discuss risks, control weaknesses, and improvement opportunities
• Prepare clear, concise, and value-adding audit reports with practical recommendations
• Present audit results to management
• Track and follow up on the implementation of agreed management actions

Requirements

• Bachelor’s degree in information systems, Computer Science, Accounting, or a related field
• 5 years or more experience in IT audit, IT risk, or technology assurance, with at least 2–3 years in a managerial or supervisory role
• Strong experience in IT General Controls and application controls testing
• In-depth knowledge of ITGCs, application controls, and cybersecurity principles
• Knowledge of COBIT, ITIL, ISO 27001, King IV governance principles, GDPR requirements
• Experience in data Analytics
• Professional Certifications Required: CISA (Certified Information Systems Auditor) – strongly preferred, CISM, CRISC, CIA, or CISSP – advantageous

Benefits

• Flexible working and unlimited leave policy
• Competitive salary package and bonuses
• Initiatives aimed at ensuring they reach their full potential in a supportive environment