About the Role
The Department of Information and Communication Technology is seeking a qualified individual for the position of Assistant Director: Information Technology Audit in Pretoria. This pivotal role focuses on the governance and security of information technology within the public service, ensuring that systems are efficient, secure, and compliant with legislative standards. By joining this team, you will be contributing to the integrity of public service operations, which is essential for maintaining public trust and enhancing service delivery to citizens.
As an Assistant Director, you will play a vital role in conducting ICT audits that assess risks and controls surrounding technology and data management. Pretoria, the administrative capital of South Africa, is the perfect backdrop for this mission, as it is home to many governmental entities that depend on robust ICT frameworks. Your work will directly impact the operational effectiveness of these entities, making a difference in the daily lives of South Africans.
About the Department
The Department of Information and Communication Technology is dedicated to enhancing the efficiency of public service through the strategic use of technology. Its mission is to promote sound governance and effective risk management in the ICT sector, ensuring that all departments can leverage technology to serve the public better. Working here means being part of a team that is committed to continuous improvement and innovation in public service delivery.
What You’ll Do
- Develop and implement ICT audit plans based on risk assessments
- Conduct preliminary surveys and analyze ICT risks and controls
- Execute ICT audit engagements covering areas like governance and cybersecurity
- Prepare and maintain comprehensive audit documentation
- Draft audit reports and present findings to management
- Monitor the implementation of management action plans and conduct follow-up audits
- Liaise with stakeholders, including external auditors, during audit processes
- Contribute to quality assurance and continuous improvement initiatives within the Internal Audit Unit
What You’ll Need
- Recognised NQF 6 qualification in Internal Auditing, Information Systems Auditing, or related fields
- Minimum of four years of experience in ICT Audit or Internal Audit, with at least two years at a senior practitioner level
- Knowledge of ICT governance, cybersecurity, and risk management frameworks
- Professional certifications (advantageous) such as CISA, CIA, or CISM
- Strong report writing, communication, and stakeholder management skills
- Valid driver’s license (candidates with disabilities may still be considered)
How to Apply
Please refer to the application instructions below.
Looking for more South African government jobs? Browse the latest vacancies on JobsSouthAfrica.co.za. If you are applying for the first time, read our Complete Guide to Applying for Government Jobs in South Africa, covering the Z83 form, certified copies, CV format, interview tips and more.
Requirements
A recognised NQF 6 qualification in Internal Auditing, Information Systems Auditing or related fields.Minimum of Four (4) years in ICT Audit or Internal 75 Audit of which 2 years must be at a senior practitioner level or equivalent.
Experience in conducting ICT governance, cybersecurity, application controls and ICT general control reviews.
Professional Certification (Advantageous): Certified Information Systems Auditor (CISA).
Certified Internal Auditor (CIA).
Certified Information Security Manager (CISM).
COBIT Foundation Certification.
Other recognised ICT Governance or Cybersecurity certifications.
Public Finance Management Act (PFMA).
Treasury Regulations.
Public Service Act and Regulations.
Protection of Personal Information Act (POPIA).
DPSA Corporate Governance of ICT Policy Framework (CGICTPF).
Global Internal Audit Standards.
COBIT Framework.
ISO 27001 Information Security Standards.
Risk Management Frameworks.
ICT Governance and Cybersecurity Principles.
BAS, PERSAL, LOGIS and other government systems.
ICT Audit and Assurance.
Risk Assessment and Control Evaluation.
Data Analysis and CAATs.
Report Writing.
Communication and Presentation Skills.
Stakeholder Management.
Problem Solving and Analytical Thinking.
Project Management.
Quality Assurance.
Time Management.
Teamwork and Interpersonal Skills.
A valid driver’s licence (Persons with disabilities that prevent them from driving will still be considered).
Job Duties
The successful candidate will be responsible for ICT Audit Planning and Risk Assessment; Assisting in the development of the annual and rolling ICT audit plans based on departmental risk assessments; Conducting preliminary surveys and risk assessments for assigned ICT audit engagements; Analysing ICT risks, control environments and business processes.Developing audit objectives, scope, criteria and audit programmes; Preparing audit planning documentation in accordance with the Internal Audit Methodology; Executing of ICT Audit Engagements; Conducting ICT audits covering ICT Governance, Information Security, Cybersecurity, Infrastructure Management, Identify and Access Management, Change Management, Business Continuity Management and Disaster Recovery; Performing application control reviews and data analytics; Evaluating the adequacy and effectiveness of ICT controls; Conducting interviews, walkthroughs and control testing; Utilising Computer- Assisted Audit Techniques (CAATs) and other audit tools during audit engagements; Compiling and maintain comprehensive audit working papers; Auditing Reporting and Follow-up; Analysing audit evidence and develop audit findings; Identifying root causes, risks and control weaknesses; Drafting audit reports and obtain management comments; Presenting audit findings to the Deputy Director and management during audit engagements; Monitoring implementation of agreed management action plans; Conducting follow-up audits and report on implantation status; ICT Governance, Risk and Compliance Reviews; Assessing compliance with applicable legislation, frameworks and standards, including PFMA, Treasury Regulation, POPIA, DPSA Corporate Governance of ICT Policy Framework, COBIT and ISO 27001; Evaluating ICT governance structures and processes; Reviewing digital transformation initiatives and ICT projects; Assessing ICT risk management and information security practices; Evaluating business continuity and disaster recovery arrangements; Stakeholder Engagement and Advisory Services; Liaising with management during audit engagements; Participating in entrance, progress and exit meetings; Providing advisory services relating to ICT control and governance where required; Assisting management in understanding audit findings and recommendations; Liaising with external auditors and service providers when required; Contributing to combined assurance initiatives; Quality Assurance and Knowledge Management; Ensuring compliance with the Global Internal Audit Standards and departmental methodologies; Performing quality reviews of audit working papers and supporting evidence; Maintaining accuracy and complete audit documentation; Contributing to continuous improvement initiatives within the Internal Audit Unit; Providing coaching and technical support to interns and junior audit staff where required; Keeping abreast of emerging ICT risks, technologies and auditing techniques
