Senior IT Auditor (CPT)

The role

What will you do?

To conduct various types of assurance and consulting reviews with the primary focus on IT General Controls, Application Controls, IT Governance, IT Risk Management and similar disciplines across the Santam Group (Santam Ltd, subsidiaries, brokers, portfolio managers, underwriting agencies and partners). This will be done in accordance with the annual audit plan approved by Santam’s Audit Committee and conducted in terms of Global Internal Audit Standards. The role requires someone with strong IT skills as well as the ability to engage different levels of stakeholders and be comfortable engaging on concepts related to application and database architectures & infrastructure as well as complex business processes. The role also requires a person who can apply our risk-based methodology, as well as lead and conduct multiple audit assignments and work independently. 

What will make you successful in this role?

•    To conduct risk-based technology focussed (IT) audit assignments ultimately to contribute to delivering on the internal audit plan approved by Santam’s Group Audit Committee. This could include general computer control reviews, application control reviews and reviews of IT controls within the various business processes such as application and data interfaces as well as pre-implementation and post-implementation reviews with a focus on application controls. Audits will also cover governance related areas such as IT Governance, IT Risk Management etc.
•    Assignment work entails assignment planning, execution, reporting and audit follow up work (where applicable) including the following activities:
•    Performing risk and control assessments;
•    Developing, executing and in some cases, reviewing audit procedures;
•    Preparing audit findings and unpacking root causes with management;
•    Compiling an audit report and workshopping practical action plans with various levels of stakeholders which will support the achievement of the Santam Group’s and our business partners strategic and financial objectives;
•    Ensuring that audit work is documented on GIA’s audit software tool and adheres to the required quality standards; and
•    Ensuring that audit work is completed within time and cost budgets.
•    Assist in reporting to various audit, risk & related committees.
•    Provide input into annual audit planning.
•    Follow up on audit issues raised and provide input into the reports to the audit committee and other relevant governance structures.
•    Maintain quality standards in terms of the audit methodology, approach and documentation.
•    Supporting and mentoring junior / trainee auditors.
•    Client relationship management with internal Santam stakeholders as well as external stakeholders.
•    Championing Internal Audit’s role in the organisation by serving as GIA’s representative at relevant, key Santam forums.
•    National travelling to Santam offices and partners may be required.

Qualification and experience

• A relevant completed tertiary qualification in science, commerce, engineering, technology, information systems, informatics or similar. 
• More than 4 years’ experience in an IT audit/ consulting/ risk management/ governance or similar operations function and demonstrable exposure as per the job description.
• Experienced in performing IT general, application controls and similar types of audits across a range of environments.
• Solid understanding of traditional business processes and how they interact at an application and database level.
• An advanced understanding of internal audit disciplines, methodologies and practices.
• Experience in the insurance industry is preferred.
• Progress towards or completed CISA, CRISC, or similar.
• Good understanding of relevant security and control frameworks such as COBIT, ITIL, COSO, OWASP, CIS & similar frameworks.
• Experience with industry leading audit software packages such as DiligentONE would be advantageous.
• Experience in implementing and using Artificial Intelligence tools in an audit setting would be advantageous.

Skills

•    Very strong numerical, analytical and conceptual skills 
•    Analytical ability and logical reasoning
•    Understanding of key controls and risk management principles
•    Strong time management
•    Excellent interpersonal, communication and networking skills
•    Relationship management (Strong client service orientation)
•    Facilitation skills and ability to influence individuals, groups and teams
•    Strong verbal and written communication skills
•    Conflict management and negotiation skills
•    Ability to work effectively in a team as well as by yourself

Competencies

• Conceptual and innovative thinker
• Ability to think analytically
• High ethical standards
• Problem solving skills
• Proactive and achievement oriented
• Delivering results and meeting customer expectations
• Planning and organising
• Writing and reporting
• Knowledge management and sharing

• Ability to work under pressure

Who are we

Santam is South Africa’s leading general insurer, with a market share of approximately 24% and over 108 years of industry expertise. We provide a comprehensive range of general insurance products and services to individual, commercial and corporate clients across South Africa, Namibia and selected emerging markets through a network of intermediaries, direct channels and strategic partnerships. Our diverse portfolio includes motor, property, liability, engineering, agricultural, guest house, tourism, leisure and entertainment, and reinsurance solutions. We also offer specialised agricultural insurance products, including crop, asset and weather insurance, as well as claims, brokerage and SOS services. Serving more than one million policyholders, our client base ranges from individuals to commercial enterprises, specialist business owners and institutions. Headquartered in Cape Town, South Africa, Santam was founded in 1918 and listed on the JSE in 1964. The Group also holds secondary listings on the Namibian Stock Exchange and A2X Markets Exchange and is a subsidiary of the Sanlam Group, one of Africa’s largest financial services organisations.
Santam Syndicate 1918 is a wholly owned and capitalised entity of Santam, established as a key component of Santam’s international growth strategy. Based in London, the syndicate plays a strategic role in expanding and strengthening Santam’s global footprint through access to London market expertise, distribution networks, and Lloyd’s worldwide insurance and reinsurance licences. Managed and operated from London, Santam Syndicate 1918 is led by a highly experienced leadership team committed to underwriting excellence, disciplined decision-making, and operational accountability. We foster a collaborative and inclusive culture where underwriting, claims, actuarial and other specialist teams work closely together to deliver superior underwriting performance, sustainable growth, and exceptional outcomes for our clients and partners.