Key responsibilities

• Lead and execute IT audit and risk advisory engagements from planning through to reporting, ensuring high-quality delivery within defined budgets and timelines.
• Conduct IT risk assessments, evaluate business processes, and assess internal controls to identify areas for improvement and risk mitigation.
• Perform IT general controls (ITGC) testing across applications, databases, networks, and operating systems to evaluate control effectiveness.
• Execute reviews of access controls, network configurations, database security, and cybersecurity governance frameworks.
• Assess IT policies, standards, and compliance with frameworks such as COBIT, ISO 27001, NIST, and related cybersecurity and risk management standards.
• Collaborate with business process owners and technical teams to design control improvements and operational efficiencies.
• Develop and maintain documentation for audit procedures, findings, and risk assessments with high precision and attention to detail.
• Apply data analytics tools and techniques to identify anomalies and patterns within large datasets supporting audit and compliance outcomes.
• Engage with clients to understand business processes, gather insights, and present findings in a clear, professional manner.
• Support partners and senior management in preparing proposals, presentations, and client pitches for business development.
• Contribute to knowledge sharing, staff training, and process improvement initiatives within the BRS team.
• Maintain professional ethics and confidentiality while ensuring compliance with engagement and firm policies.
• Travel to client locations as required for audits, assessments, and stakeholder meetings.