Az álláshirdetés lejárt.
Aktuális állást talál az aktív állásajánlatok között: új keresés indítása itt
www.cvonline.hu

IFS - IT Internal Auditor - Permanent - London - London


  • A hirdetés 881 napja lejárt
IFS - IT Internal Auditor - Permanent - LondonReference OPS04732Location LondonService Operations (Internal Firm Services)Specialism I.T.Industry Who we are looking for
Internal Audit's mission is to provide assurance to the Executive Board and to the Audit and Risk Committee of the Supervisory Board of PricewaterhouseCoopers LLP that effective systems and controls are in place in the organisation to manage all significant risks identified and agreed as within its scope. Our client is the PwC UK firm. We also cover the Middle East firm (where we have a branch comprising three employees) and the Channel Islands firm. Additionally, we carry out a small number of IT audits jointly with the US firm's internal audit team on applications or service delivery providers used by both the UK and US firms.
IAT supports the firm's development of a risk management and governance framework and provides consulting and investigatory advice, as well as supporting the external auditors. We apply a wide range of assurance techniques, with a strong emphasis on risk management, performance improvement, financial probity and change management.
The main types of projects undertaken by Internal Audit include:
• Reviews of risk management framework
• Pre-implementation reviews of new systems or other business initiatives
• End-to-end controls and efficiency reviews of systems
• Review of contract management arrangements, including client assignments
• Reviews of compliance with ISO27001 and ISO22301
• IT reviews
• Regulatory compliance reviews
• Special investigations
The team comprises a Director, who is the Head of Internal Audit, and a mix of senior managers, managers and executives. The role of the Executive is to provide support to the Director, the senior managers and the managers in the performance of the annual operating plan.
The major part of the work is based in London with some travel to regional offices and the locations of service providers, some of whom are overseas based. There is also the opportunity to carry out projects in our Dubai office.
We are looking for an applicant with the potential, depending on performance, for early promotion to manager and beyond.
About the role
PwC's use of IT technology is both significant and is continually changing and innovating. It is certified for ISO27001 and ISO22301. Internal Audit team covers all aspects of IT risks and reviews compliance with the above ISOs. There are three full time IT auditors in the team of 16 plus an additional two who are CISA qualified.
The IT auditor who is leaving has been with the team for 4½ years, but now wishes to work closer to home.
IAT is headed by a director who reports to the firm's Managing Partner. The IT audit executive would be people managed by the IT senior managers in the team, but would have regular on-to-one contact with the director.
Typically the Executive's work includes:
• drawing up with the manager the scope of the work, which includes determining our key objectives and the risks which our work is aiming to cover • agreeing scope of work with the client in conjunction with the manager • documenting the work plan for carrying out the project • carrying out process reviews - the methodology for a process review typically would involve interviewing client staff, observing procedures, reviewing documentation, testing controls and procedures and some re-performance. The main objective is to obtain adequate assurance that effective controls are in place to ensure that the firm's data is accurately processed and that appropriate security is maintained over the firm's confidential information. A secondary objective is to consider the efficiency of the process i.e. to ensure that processing is done with sufficient, but not excessive resources, whilst, at the same time, maintaining a properly functioning controls framework • pre-implementation reviews - the methodology for a pre-implementation review involves acting as a consultant with cross-business project teams to ensure that the implementation is carried out in a low risk manner and that the solution meets business objectives, with particular regard to the adequacy of controls • risk management and regulatory compliance reviews involve interviewing staff and checking the adequacy of risk management arrangements or compliance with regulation, as appropriate • reviews of contract management arrangements mainly relate to reviewing the financial and risk management of client assignments and involve interviewing client facing partners and managers and reviewing relevant documentation • the firm has obtained ISO27001 certification. A significant part of the role includes testing compliance with the requirements of the standard, a knowledge of which is preferable • IT reviews cover the general controls environment, applications controls and business continuity arrangements • executing the work plan in accordance with the project scope and methodology • ensuring that the manager is kept regularly and thoroughly briefed on the progress on the project • pulling together the issues raised during the project and, in conjunction with the manager, communicating these to the client and ensuring that an agreed plan of action is reached • maintaining and developing client relations within projects.
More specifically for IT auditors:
• reviews of the general IT controls environment covering, but not limited to, organisational and operational controls, change management, system interfaces, systems development including segregation between development and production environments, program development and testing, configuration and release management process network controls, physical security, user authentication controls, administrator account controls, back up and recovery, file and data permissions, incident management and configuration controls • applications controls reviews which typically would involve interviewing client staff, observing procedures, reviewing documentation, testing controls and procedures and some re-performance. The main objective is to obtain adequate assurance that effective controls are in place to ensure that the firm's data is accurately processed and that appropriate security is maintained over the firm's confidential information. A secondary objective is to consider the efficiency of processes i.e. to ensure that processing is done with sufficient, but not excessive resources, whilst, at the same time, maintaining a properly functioning controls framework reviewing the business continuity and disaster recovery framework from the strategic level downwards
Requirements
• One to four years post-qualification IT auditing experience in either an external audit or an internal audit environment. • A good understanding of systems auditing, coupled with a sound knowledge of IT risks.
• Knowledge and experience of ISO27001, ISO22301 and COBIT are preferable.
• Excellent communication skills. This involves, in part, a persuasive consultancy role with clients and, in part, an ability to write high quality (and also high profile) reports which provide balanced, concise and authoritative judgements. These reports are made available to senior management, including the firm's
• Audit and Risk Committee.
• Excellent organisational skills.
• Self-motivated and able to prioritise own workload.
• Willing and flexible attitude.
• Team player.
• Able to work under pressure, on own initiative and as part of a team.
• Ability to establish good working relationships with clients and colleagues.
• Committed to gaining new experience and updating skills.
• Good working knowledge of Microsoft Office software. Experience of working in a SAP environment and of using software tools would be particularly welcome.
• To have either the IIA or CISA qualification or to be studying towards one of these.
The skills we look for in future employees
All our people need to demonstrate the skills and behaviours that support us in delivering our business strategy. This is important to the work we do for our business, and our clients. These skills and behaviours make up our global leadership framework, 'The PwC Professional'.
The PwC Professional focuses on five core attributes; whole leadership, business acumen, technical capabilities, global acumen and relationships. We use this framework to recruit, develop and assess our people, at all grades and all areas of our business, because we expect all of our people to be leaders.

DiversityWe work in a changing world which offers great opportunities for people with diverse backgrounds and experiences. We seek to attract and employ the best people from the widest talent pool as well as those who reflect the diverse nature of our society. And we aim to encourage a culture where people can be themselves and be valued for their strengths. Creating value through diversity is what makes us strong as a business.
As an organisation with an increasingly agile workforce, we're open to flexible working arrangements where appropriate.Link megjelenítése" width="0" height="0" />
Helyek Külföld
Kategória Külföldi munka
Egyéb hasonló állások Önnek
Communications Specialist

HAYS Hungary Kft.

Your new company We are looking for a Communica...
Budapest


French Accounts Payable Specialist

HAYS Hungary Kft.

Your new company Our partner is a really signif...
Budapest


Technical Specialist - Electrical Engineering

HAYS Hungary Kft.

Job description:   o High voltage / low voltage...
Budapest