Implements IT-related audit, follow-up audit, and ad hoc audit projects in accordance with the approved Annual Audit Plan and as instructed by the Audit Committee;
Implements non-IT audit, follow-up audit and ad hoc audit projects in accordance with the adopted Annual Audit Plan and as instructed by the Audit Committee;
Evaluates the effectiveness of Risk Management, and internal corporate governance controls in the framework of IT audit projects
Oversees the work of employees under his/her supervision within the framework of the IT audit project
Takes part in the development of the reports on the results of the IT audit project;
Performs analysis of information systems based on available data of information systems and assesses risks of internal control gaps;
Analyzes the dependencies of IT and IS business processes impacting business sustainability directly;
Specifies assessment criteria based on IT audit standards and vendor databases for the purpose of risk assessment
Participating in the development of Work Program for the IT audit project;
Ensuring the implementation of audit procedures to identify issues in internal control during IT audit project;
Ensuring the implementation of IT audit projects and the consideration of major IT, information security and cyber security risks;
Developing IT audit reports in an appropriate, high-quality and effective manner;
Participating in the drafting of summary reports related to the activities of the Internal Audit Department as instructed by its Director;
Participating in the drafting of the Retain Management report;
Overseeing the work of the IT auditors under his/her supervision and providing feedback on the results;
Fulfilling other tasks assigned by Project Leader or the Director of the Internal Audit Department within his/her competence;
Xüsusi tələblər
Academic degree in the relevant field (Bachelor's degree and above);
Related work experience: over 3 years in IT, IT audit or Information Security;
Expertise in IT and internal audit;
IT and cyber security knowledge relevant to the related industry and business processes for implementing audit procedures;
Strong analytical and communication skills;
Technical knowledge: network and network security. Ability to work with MS Windows and Linux based operating systems. Knowledge of databases and information security. Knowledge of data analytics. SQL and PowerShell scripts;
Standards: Internationally accepted IT and IS standards - ISO/IEC 27007, ISO/IEC 27033, PCI DSS, NIST;