The Corporate IT Audit Specialist is responsible for evaluating and improving an organization’s information technology (IT) infrastructure, ensuring compliance with regulatory standards, security policies, and industry best practices. The role involves conducting IT audits, assessing risks, analyzing system controls, and providing recommendations to enhance IT governance and security.

Audit Execution

• Perform specialized IT audit tasks by evaluating IT controls, cybersecurity measures, and data integrity.
• Apply core IT audit methodologies under supervision.

Risk and Control Framework

• Demonstrate a basic understanding of IT risk concepts and relevant internal control principles.
• Identify straightforward IT control gaps and support remedial recommendations.

Audit Planning and Report Writing

• Assist in planning simple IT audit engagements and prepare clear, concise work papers.
• Contribute to drafting basic IT audit reports.

Compliance Auditing

• Understand and apply fundamental regulatory requirements, cybersecurity standards (i.e. ISO 27001, NIST, COBIT, ITIL, GDPR, DPA)

Data Analytics and Process Improvement

• Use basic data analytics tools to identify trends in IT operations and support identification of process inefficiencies.

Education & Experience:

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• 0 – 2 years of experience in IT auditing, cybersecurity, or IT risk management.

Technical & Professional Skills:

• Basic understanding of IT audit frameworks (COBIT, ITIL, NIST etc.)
• Familiarity with basic networking concepts, operating systems, and cloud computing (AWS, Azure, or Google Cloud).
• Awareness of cybersecurity principles, such as access controls, encryption, and vulnerability management.
• Exposure to Microsoft Office (Excel, Word, PowerPoint) for audit documentation and reporting.
• Ability to learn quickly and adapt to new audit tools and IT environments.
• Good communication and teamwork skills to collaborate with IT and business units.
• Interest in obtaining industry certifications like CISA, Security+, or ITIL Foundation in the future.

Please refer to job description.