Gauteng: IT Auditor posted by Salix Recruitment

A well-established, multi-entity organisation operating in a complex, technology-driven environment is strengthening its Internal Audit function with the appointment of an IT Audit Assistant Manager / Supervisor. This role sits at the intersection of risk, technology, and governance – ideal for a professional who understands that strong IT controls are not just compliance requirements, but business enablers.
This opportunity is suited to an experienced IT audit professional ready to step into a leadership-focused role with real influence. The position offers exposure to diverse systems, evolving technologies, and enterprise-level risk landscapes, while also providing the platform to mentor junior auditors and shape IT audit standards within the function.
For information on the role, reach out to: .za
 
Duties:

Infrastructure & Automation

• Plan, manage, and execute risk-based IT audit assignments across multiple business units
• Assess IT General Controls (ITGCs), including:
  • User access management
  • Change management
  • IT operations
  • Backup and recovery processes
• Evaluate application controls across key business systems such as ERP, HR, and finance platforms
• Review system configurations, data integrity processes, and security settings
• Identify and document IT risks, control weaknesses, and process gaps
• Develop practical, risk-based recommendations to strengthen the control environment
• Perform audits in line with internal audit methodology and international standards (IIA / ISACA)
• Present audit findings and recommendations to senior and executive management
• Provide advisory input on system implementations, migrations, and control design
• Conduct technical reviews of junior auditors’ working papers to ensure quality and completeness
• Define and standardise working papers to ensure IT risks are comprehensively addressed
• Collaborate with IT management, business stakeholders, and external auditors on remediation efforts
• Contribute to the enhancement of IT audit methodologies, tools, and best practices
• Stay current on emerging technologies, cybersecurity threats, and regulatory developments
• Mentor and supervise junior IT audit team members

Job Experience & Skills Required:
Qualifications:

• Matric (Grade 12)
• Bachelor’s degree in Accounting, Information Technology, Computer Science, Information Systems, or a related field
• Chartered Accountant (SA) – Required

 
Additional professional certifications advantageous:

• Certified Internal Auditor (CIA)
• Certified Information Security Manager (CISM)
• CRISC, CGEIT, ISO 27001 Lead Auditor, or similar

 
Experience:

• 5–7 years’ experience in IT Audit, IT Risk, or IT Assurance roles

 
Hands-on exposure to IT operations environments, including:

• System administration
• Network management
• Backup and recovery
• Change management processes

 
Strong experience auditing:

• IT General Controls (ITGCs)
• Application controls
• System implementation or project reviews
• ERP audit exposure (e.g., SAP, Oracle, Syspro, Sage, Microsoft Dynamics)
• Working knowledge of recognised frameworks and standards such as COBIT, ISO 27001, NIST, and ITIL
• Exposure to cybersecurity reviews, data analytics, and cloud environments advantageous

 
Advantageous
 

• Exposure to Azure or other cloud platforms
• Experience with object storage platforms (S3-compatible, MinIO, etc.)
• Experience with message brokers such as RabbitMQ
• Familiarity with CI/CD for .NET and containerised applications
• Experience in environments transitioning toward Kubernetes
• Exposure to financial services, asset management, or similarly regulated industries

Skills & Competencies:
 
Technical & Professional Skills

• Strong understanding of IT infrastructure, networks, databases, and operating systems (Windows, Linux, SQL)
• Proficiency in data analytics and audit tools such as ACL, IDEA, Power BI, or advanced Excel
• Knowledge of cybersecurity principles, identity and access management, and SDLC controls
• Strong analytical thinking with the ability to translate technical risk into business impact
• High-quality report writing and presentation skills

 
Behavioural Competencies

• High level of professional integrity and ethical judgement
• Strong attention to detail with a quality-driven mindset
• Confident stakeholder engagement across IT, operations, and leadership levels
• Leadership capability with the ability to mentor and develop junior team members
• Strong time management skills with the ability to manage multiple audits simultaneously
• Continuous learning mindset in a rapidly evolving technology and risk landscape

 
If you have not had any response in two weeks, please consider the vacancy application unsuccessful. Your profile will be kept on our database for any other suitable roles / positions.