Job Description
• Carrying out audit tests on internal controls in accounting, administration, information
systems and operational procedures;
• Preparing audit reports;
• Preparing risk-based audit plans, programmes and schedules;
• Examining and evaluating the Authority’s internal controls to ascertain their adequacy and
make recommendations for improvement;
• Reviewing the ICT security policies, standards, procedures and controls ensure the
confidentiality, integrity and availability of information assets;
• Performing information control reviews of internal control procedures including system
development standards, operating procedures, system security, programming controls,
communication controls, back up and disaster recovery and systems maintenance;
• Coordinating the updating and review of the department’s Quality Management Systems
(QMS) and Information Management System (ISMS);
• Identifies opportunities for process improvement in IT policies and practices;
• Preparing audit reports and working papers to ensure that adequate documentation exists
to support the completed audit conclusions;
• Documenting audit working and paper files;
• Following up on implementation of audit recommendations and reporting on the same;
• Performing ad hoc audit assignments; and
• Providing support to external auditors.