University of Malawi
Job Summary:
The IT Internal Auditor is responsible for evaluating and ensuring the effectiveness of the university’s IT controls, systems, and security measures. This role involves assessing IT risks, ensuring compliance with relevant regulations and industry standards, and providing recommendations to improve IT governance and security.
Qualifications and Attributes
Applicants should possess the following qualification and attributes:
-
Bachelor’s degree in Information Technology, Computer Science, Accounting, or a related field.
-
Professional certifications such as CISA (Certified Information Systems Auditor), CISSP.
-
At least 3-5 years of experience in IT auditing, cybersecurity, or IT risk management.
-
Strong understanding of IT general controls.
-
Experience with audit tools, data analytics, and IT risk assessment methodologies.
Key Competencies
-
Strong analytical and problem-solving skills.
-
Excellent communication and report-writing abilities.
-
Ability to work independently and as part of a team.
-
High level of integrity, professionalism, and attention to detail.
-
Strong stakeholder engagement and interpersonal skills.
Duties and Responsibilities
-
Conduct risk-based IT audits to assess the adequacy and effectiveness of IT controls, cybersecurity measures, and data protection practices.
-
Evaluate IT systems, applications, and networks to ensure they comply with internal policies, regulatory requirements, and industry best practices.
-
Assess the adequacy of controls over IT operations, including system development, change management, user access management, and IT disaster recovery.
-
Identify IT-related risks and provide recommendations for mitigation.
-
Review and assess cybersecurity measures, including vulnerability assessments, penetration testing, and incident response preparedness.
-
Evaluate IT governance frameworks, including adherence to IT policies, procedures, and IT service management best practices.
-
Assess compliance with data protection regulations and advise on improvements in data security and privacy controls.
-
Work closely with IT, risk management, and other departments to ensure alignment of audit findings with business objectives.
-
Prepare detailed audit reports with findings, risks, and actionable recommendations for management.
-
Follow up on the implementation of audit recommendations and corrective action plans.
-
Stay updated on emerging IT risks, cybersecurity threats, and regulatory changes affecting IT environments.
Method Of Application
Send to:
The Registrar
University of Malawi
P. O. Box 280
ZOMBA
Or
Email: vacancies@unima.ac.mw not later than 11TH April, 2025. Only shortlisted candidates will be acknowledged.