JOB PURPOSE:
Under the leadership and direction of the Chief Audit Executive (FMG/AS 5), the Audit Manager – ICT (FMG/AS 4) will be responsible for managing the performance of audit procedures to assess risks and controls in information and communication technology environments, and documenting and evaluating the impact of those risks and controls to the MoAFM’s business objectives. The Audit Manager – ICT will also direct and review the work of an IT auditor as they assess risks associated with the use of information technology and conduct audits of IT general controls relevant to the financial statement audit, as well as providing knowledge transfer to the entire audit team on matters related to ICT audit.
KEY OUTPUTS
- ICT Audit strategies and risk-based planning supported
- ICT Audit principles, procedures and practices applied
- ICT Audit techniques and approaches applied and recommended
- Quality assurance mechanisms supported and maintained
- ICT Audit findings and recommendations assessed and validated
- Special audits conducted/coordinated
- Preparation of audit reports managed
- Follow-up audits managed
- Technical advice provided
- Audit team managed and coached
- Annual/Quarterly/Monthly performance reports prepared
- Individual work plans developed
- Staff Coached and Appraisals conducted
KEY RESPONSIBILITY AREAS
Management/Administrative Responsibilities
- Manages the development of the Section’s Corporate/Operational Plans, Budget and Individual Work Plans.
- Supervises preparation of reports to CAE, Permanent Secretary, Senior Executives and other relevant stakeholders.
- Attends Public Accounts Committee (PAC) and Public Administration and Appropriations Committee (PAAC) of the Parliament of Jamaica to provide information and support the PS and CAE as applicable.
- Represents CAE at meetings, conferences, workshops and seminars.
- Prepares reports and project documents as required.
- Prepares and delivers Internal Audit presentations as needed.
- Supports and maintains customer service principles, standards and measurements.
Technical
- Supports the Chief Audit Executive actively in conducting strategic and risk-based planning for the MoAFM, its Departments and Agencies.
- Participates in the development and implementation of annual Audit Plan and Work Plan being guided by the MoAFM’s policies, regulatory requirements and guidelines.
- Applies knowledge of the principles, procedures and practices of accounting, financial records/record keeping and general audit practices to the audit processes.
- Recommends the appropriate use of techniques as well as tests and sampling methods in the conduct of audits; ensure that team members conform to Internal Audit Standards, Accounting Standards and Financial Regulations.
- Manages the planning conducting and reporting of ICT performance audits and/or audits of ICT general controls related to financial statement audits and other operational audits concerning ICT ensuring the work meets required standards.
- Guides the definition of audit objectives, required resources and timeframes needed to analyse the ICT environment for assigned projects.
- Leads teams to conduct specialized ICT audits and reviews to evaluate controls in business systems, operating environments, ICT strategic planning, ICT management, and ICT security policies and procedures.
- Reviews the auditors' document and evaluates ICT general controls and assessment of ICT environmental risks as they relate to the integrity of financial statements and other operational considerations.
- Performs and documents ICT audit procedures for complex or high-risk performance audits or audits of ICT general controls related to financial statement audits, including developing the ICT components of the audit plan, collecting data, conducting on-site IT reviews, and concluding on the effectiveness of controls in the organizations being audited.
- Supports and maintains an approved quality assurance and improvement programme covering all aspects of Internal Audit.
- Provides support to Internal Audit Divisions/Units in the Departments and Agencies of the MoAFM in conducting quality self-assessments as well as compliance monitoring and risk management activities, as required.
- Manages the preparation and content of ICT audit reports by drawing conclusions and making recommendations based on analysis of evidence gathered.
- Recommends changes to the Unit’s standard operating procedures and methodologies in order to ensure consistency and the ability to support the goals, objectives and targets of the GOJ.
- Visits MoAFM Departments and Agencies being audited to ensure compliance with audit procedures, resolve challenges and maintain good client relations.
- Reports on deviations and or departure from the approved internal control systems as well as any perceived risks and recommend changes which will safeguard compliance and effectiveness.
- Manages the output of assigned audit team engaged in financial and non-financial audits within the sphere of their assigned responsibilities.
- Assesses the audit findings in order to identify any possible weaknesses, risk exposure and or violations of rules and regulations.
- Provides input in developing and implementing financial and/or non-financial systems and controls whether automated or manual.
- Manages the Audit progress and review compliance with Audit procedures and quality assurance which must be aligned to that of the Internal Audit Directorate.
- Provides guidelines and instructions to team members and tailor instructions to each programme and/or functional area.
- Reviews working papers to provide assurance that their preparation conform to Internal Audit policies, processes and standards.
- Conducts follow up audits and site visits to assess the conformance in the implementation of approved changes, recommendations and systems.
- Conducts and or supervise special audits which are assigned by the CAE.
- Manages and guides direct reports towards achieving the strategic objectives of the Audit Unit of the MoAFM and supporting the Ministry’s Vision of becoming regional leader in facilitating effective access to justice for all.
- Monitors assigned audits according to acceptable International Audit standards and practices, the GOJ’s requirements, as well as agreed and measurable targets.
- Reviews adherence to audit procedures and agree performance targets.
- Convenes team meetings to assess accomplishments, discuss upcoming audits and job scheduling as well as issues and concerns which could impact and or prevent the team from delivering according to agreed timelines.
- Maintains cordial and professional relationships with external and internal stakeholders and clients.
- Keeps abreast of emerging audit principles, procedures and practices/guidelines to ensure adherence to international standards and competitiveness.
Human Resources Responsibilities
- Monitors and evaluates the performance of direct reports, prepares performance appraisals and recommends and/or initiates corrective action where necessary to improve performance and/or attain established personal and/or organizational goals.
- Participates in the recruitment of staff for the Unit and recommends transfer, promotions, terminations and leave in accordance with established human resource policies and procedures.
- In collaboration with the Human Resource Division, develops and implements a succession planning programme for the Unit to facilitate continuity and the availability of required skills and competencies to meet the needs of the Unit.
- Ensures the welfare and development needs of staff in the Unit are clearly identified and addressed.
- Establishes and maintains a system that fosters a culture of teamwork, employee empowerment and commitment to the Unit’s and organizational goals.
- Ensures that the staff is aware of the policies, procedures and regulations of the Unit and the Ministry.
- Ensures that staff is adequately equipped with the facilities and equipment necessary for effectively carrying out their duties.
- Other Responsibilities
- Performs any other related duties assigned by the CAE.
PERFORMANCE STANDARDS
- Audit strategies and risk-based planning supported in accordance with the MoAFM’s risk profile, priorities and agreed timeframes.
- Audit principles, procedures and practices applied in keeping with professional standards and timeframes.
- Audit techniques and approaches applied and recommended in keeping with industry standards, GOJ guidelines and timeframes.
- Quality assurance mechanisms supported and maintained in keeping with industry standards, GOJ guidelines and timeframes.
- Audit findings and recommendations assessed and validated in keeping with professional standards and timeframes.
- Special audits conducted/coordinated in keeping with professional standards and timeframes.
- Preparation of audit reports managed in accordance with GOJ regulations, agreed standards and within the required timeframes.
- Follow-up audits managed in keeping with professional standards and timeframes. Technical advice provided is evidence-based and timely.
- Audit team managed and coached in keeping with professional standards and timeframes. Recommendations and or advice on internal controls, provided are evidence-based and delivered within agreed timeframes.
- Annual/Quarterly/Monthly performance reports are prepared in accordance with agreed format, are accurate and submitted on time.
- Individual Work Plans developed in conformity to established standards and within agreed timeframes.
- Staff Appraisals completed and submitted in accordance to agreed timeframe and standards.
- Confidentiality, integrity and professionalism displayed in the delivery of duties and interaction with staff.
INTERNAL AND EXTERNAL CONTACTS
Internal Contacts
- Chief Audit Executive
- Provide advice and contribute to decision making;
- Identify emerging issues/risks and their implications, and propose solutions;
- Receive guidance and provide regular updates on key projects issues and priorities.
- Executive Management/Divisions
- Provide expert advice on Internal Audit;
- Report and provide updates on Internal Audit Interventions;
- Request response to audit queries.
- Direct Reports
- Provide coaching, guidance and support.
- General Staff
- To exchange Internal Audit information
External Contacts
- Ministries/Departments/Agencies
- Establish professional networks and relationships to maintain currency of issues, share ideas and learnings, and collaborate on common responses to emerging and/or developing public policy issues;
- Internal Audit Directorate - MoFPS
- Establish professional networks and relationships to maintain currency of issues, share ideas and learnings, and collaborate on common responses to emerging and/or developing Internal Audit issues;
- Receive training on new Internal Audit policies, programmes, standards, procedures, etc.; as well as refresher training.
- Auditor General’s Department
- Establish professional networks and relationships to maintain currency of issues, share ideas and learnings, and collaborate on common responses to emerging and/or developing Internal Audit issues;
- Integrity Commission
- Establish professional networks and relationships to maintain currency of issues, share ideas and learnings, and collaborate on common responses to emerging and/or developing Internal Audit issues;
- Other Stakeholders, example: Professional Bodies, Academia, etc.
- Foster effective proactive relationships with other stakeholders, in particular community and/or industry groups for whom Internal Audit impacts are most critical.
REQUIRED COMPETENCIES
Core
- Excellent oral communication skills
- Excellent written communication skills
- Good interpersonal skills
- Strong customer relations skills
- Team work and cooperation
- Good problem solving and conflict management skills
- Strong leadership and management skills
- Excellent planning and organizing skills
- Managing External Partners
Technical
- In-depth knowledge of Audit Principles and Techniques.
- In-depth knowledge of:
- ICT governance, security, operations, and control frameworks and standards (e.g., COBIT, ISO, PCI, ITIL)
- ICT strategic planning (including alignment with objectives, tactical planning, performance measurement)
- ICT risk management processes (e.g., enterprise risk management, threat risk assessments)
- ICT policies, standards, guidelines, and procedures
- Data classification standards, guidelines, and processes
- ICT service level management practices
- Expert knowledge of the Government of Jamaica’s Accounting and Audit standards.
- Expert knowledge of Accounting Principles and Practices;
- Knowledge of GOJ ICT systems;
- Knowledge of the Public Finance Legal Framework and Public Finance Management Reforms;
- Good understanding of the public expenditure policy environment and the goals;
- Good knowledge of policy monitoring and evaluation frameworks;
- Strong ability to synthesize multiple ideas and complex information into a coherent summary, as in reports and briefing notes, and to make cogent recommendation for the modification or creation of legislation, policies and programmes;
- Good ability to deliver presentation with tact, clarity, enthusiasm and accuracy to widely varied audiences;
- A high level of initiative and self-motivation;
- Demonstrated interpersonal and negotiation skills;
- Aptitude for developing and maintaining collaborative relations with team members both within and outside the Ministry;
- Familiarity with procedures, policies and legislation governing the machinery of Government;
- Knowledge of the Government processes, including policy development, financial planning, performance management systems and basic theories, principles and methods of analysis;
- Knowledge of computerized systems and software, with an emphasis on the MS Office suite, projects and Teammate.
MINIMUM REQUIRED EDUCATION AND EXPERIENCES
- Master’s Degree in Finance, Accounting, Management Studies, Public Sector Management, Public/Business Administration, or a related discipline, OR Professional designation such as Certified Internal Auditor (CIA) or Association of Certified Chartered Accountant, (ACCA);
- Certified Information Systems Auditor (CISA) designation, or other audit designation (eg. CIA, CPA).
- Four (4) years’ ICT/IT Auditing experience in Private or Public Sector at a Senior Level.
OR
- Bachelor’s Degree in Finance, Accounting, Management Studies, Public Sector Management, Public/Business Administration, or a related discipline, OR Association of Certified Chartered Accountant (ACCA) Level 2;
- Certified Information Systems Auditor (CISA) designation, or other audit designation (eg. CIA, CPA).
- Six (6) years’ ICT/IT Auditing experience in Private or Public Sector at a Senior Level.
OR
- Associate of Science Degree in Accounting from the Management Institute for National Development along with the completion of the revised certificate in Government Accounting Course;
- Certified Information Systems Auditor (CISA) designation, or other audit designation (eg. CIA, CPA).
- Eight (8) years’ ICT/IT Auditing experience in Private or Public Sector at a Senior Level.
SPECIAL CONDITIONS ASSOCIATED WITH THE JOB
- Work will be conducted in an office outfitted with standard office equipment and specialized software. The environment is fast paced with on-going interactions with critical stakeholders and meeting tight deadlines which will result in high degrees of pressure, on occasions. May be required to travel locally and internationally to attend conferences, seminars and meetings.
AUTHORITY
- Prepares and recommends requirements for audit assignments.
- Engages a range of related stakeholders.
- Recommends staff appointments, promotion, recruitment, disciplinary action, leave and general welfare issues.
- Recommends relevant training and development programmes for direct reports to enhance knowledge and performance.
Please note that only shortlisted applicants will be contacted.