IT Auditor

We are seeking a qualified and detail-oriented IT Internal Auditor to evaluate IT controls, technology risks, and regulatory compliance across credit reporting systems. The role focuses on safeguarding sensitive credit information, ensuring data accuracy and integrity, and assessing the security, reliability, and availability of systems supporting credit reporting operations.

• Conduct risk-based IT audits in accordance with the approved audit plan and internal audit methodology.
• Evaluate IT governance, risk management, and internal controls, including IT general controls (ITGCs) and application controls.
• Assess credit reporting systems and processes for the accuracy, completeness, integrity, and confidentiality of credit data.
• Review data collection, validation, processing, reconciliation, storage, and credit report generation processes.
• Evaluate access management, privileged accounts, change management, database security, audit trails, and segregation of duties.
• Assess IT infrastructure, networks, databases, application security, APIs, and system integrations.
• Review software development, testing, deployment, and end-to-end (E2E) testing controls.
• Assess compliance with applicable credit reporting regulations, data protection laws, internal policies, and relevant standards.
• Review business continuity, disaster recovery, backup, and incident management controls.
• Identify control weaknesses and technology risks, prepare audit reports, recommend corrective actions, and monitor remediation.
• Collaborate with IT, information security, data management, risk management, and compliance teams.

• Bachelor's degree in IT, Computer Science, Information Systems, Cybersecurity, or a related field.
• Relevant experience in IT auditing, information security, IT risk management, or financial services.
• Knowledge of ITGCs, application controls, risk-based auditing, and data integrity controls.
• Understanding of credit reporting systems, databases, data processing, system interfaces, and information security.
• Familiarity with COBIT, ISO/IEC 27001, NIST standards, SDLC, and change management.
• Knowledge of data protection, business continuity, disaster recovery, and incident management.
• Strong analytical, documentation, communication, and audit reporting skills.
• Certifications such as CISA, CIA, CISSP, CRISC, or ISO/IEC 27001 Lead Auditor.
• Experience in credit bureaus, banking, financial services, or other regulated data-intensive environments.
• Knowledge of credit reporting regulations, financial data confidentiality, and regulatory compliance requirements.
• Familiarity with SQL, audit analytics, API security, and technologies such as PHP, .NET/C#, React, and Flutter, where relevant.

Financial audit experience will be considered as an advantage