Senior Internal Auditor – Systems & Procurement

The primary responsibility of the Senior Internal Auditor – Systems & Procurement is to:

• Assist the organization by protecting its internal controls related to information technology and provide assurance to the Procurement Director through the Country Internal Control Lead on the strength of the Procurement Internal Control system.  
  
• Safeguard information by identifying weaknesses and create / agree strategies to prevent security breaches.
  
• Examine the organization’s IT system to ensure sufficient controls are kept, security of data stored or transported.
  
• Classify technology issues and provide additional recommendations to management with solutions to fix internal controls.
  
•  Identify risks and design effective and efficient procurement processes and procedures to mitigate risks.  Provide support to other Procurement Managers in achieving their Control objectives by testing Controls (Design and Implementation and Operating Effectiveness), highlighting areas of weakness, performing Root Cause Analyses (where necessary) and implementing Action Plans to close the gaps.
  
• Perform assessment focus to specific procedures, routines or specifications used in a designated business area, unit or department with a view to optimize company resources.
  
• Develop annual Internal Control for Information Technology to cover all the subsidiaries and the strategic business units.
  
• Examine internal IT controls, evaluate the design and operating effectiveness, determine risk exposure and propose remediation strategies
  
• Review, evaluate and test application controls
  
• Identify weaknesses in the system and create / agree action plans to close the gaps and prevent future occurrence.
  
• Make recommendations on the systems and procedures being reviewed, report on the findings and recommendations and monitor management's response and implementation
  
• Collaborate and create a solid IT control environment for the company.
  
• Review and ensure implementation of the Group IT Policies and Procedures
  
• Conduct training / awareness on IT security features & governance and ensure strict compliance.
  
• Monitor Compliance with Purchase Requisition/ Purchase Order Release Strategy
  
• Monitor Compliance with FI/Direct Payment criteria, ensure gaps are closed in timely manner.
  
• All aspects of Procurement Risk Management – identify risk, design controls to mitigate risk, implement controls, test effectiveness and efficiency.
  
• Coordinate internal control system (ICS) for Procurement Organisation
  
• Minimum Control Standards Self-assessment for Procurement Organisation
  
• Complete data analytics as part of audit assignments in collaboration with other team members
  

Other responsibilities:

• To support in preparation of report package to the Board and audit committees on the policies, programs and internal audit and control activities over the information technology and business processes.
  
• To coordinate coverage with the external auditors and ensure that each party is not only aware of the other's work as related to IT and business process but also well briefed on areas of concern.
  
• To perform investigations as may be required and provide management an opinion on the internal controls within the operations
  
  

Critical Knowledge

• Excellent written and verbal communication skills.
  
• Strong organisational and multitasking skills, with the ability to prioritise effectively in a fast-paced environment.
  
• Proficiency in Microsoft Office applications, particularly Excel, Word and PowerPoint, as well as email applications.
  
• Familiarity with ERP platforms and business systems.
  
• Strong time management skills and the ability to manage competing priorities effectively.
  
• Proactive and solutions-oriented, with the ability to think creatively, demonstrate a sense of urgency, and resolve problems effectively.
  
• High level of accuracy and attention to detail.
  
• Strong analytical and critical-thinking skills, with the ability to interpret information and draw meaningful conclusions.
  
• Ability to maintain current knowledge of developments relevant to Internal Control and Audit, including control standards, applicable legislation, regulatory requirements, auditing techniques and professional practices, and assess their implications for the business.
  

Critical Experience

• Minimum of 2 years’ relevant professional experience, preferably with experience in an Internal Audit, Internal Control or Assurance function within a multinational organisation or Big Four firm.
  
• Proven experience in gathering, analysing and evaluating information and evidence, identifying key findings and risks, and preparing clear, concise and well-structured reports and presentations.
  
• Experience presenting audit findings and recommendations to relevant stakeholders.
  

Educational Qualifications

• Relevant Bachelor’s degree from an accredited university
  
• Membership of ISACA (CISA Certification) or any other relevant professional body