​

The Manager: Technology Audits role will be accountable to achieve the following objectives:

• Support creation of sub-functional strategy in line with overarching divisional goals.
• Support the effective alignment of sub-functional strategy by means of providing direction, structure, business plans and support.
• Manage technology, security and networks audit sub function, ensuring the effectiveness of internal controls on information security, quality of work, and audit reports and analytics, in line with internal audit standards and methodologies, with full adherence to the internal audit framework.
• Lead and manage complex internal audits on IT systems and networks, review inconsistencies and advise on required changes/ enhancements to improve technological risk management, control and governance processes, in line with company’s strategic objectives and best practice guidelines.
• Assess the likely/ projected legal implications and ramifications of IT systems and network audits.
• Support the Head IA in the consolidation, review and sign off on all IT system, security and network audit reports for submission to top management and MTN Mobile Money Uganda Audit Committee.
• Ensure cost effective operation of the internal IT system, security and network audit sub-function by driving excellence and effectiveness of the internal audit framework, which will increase internal controls and manage risk, which, due to the nature of the business, is changing constantly.
• Identify and drive, where appropriate, opportunities for cost saving initiatives without compromising quality and effectiveness of the framework.
• Provide direction to staff, ensure compliance with the standards for internal audit.
• Report to management on IT systems and network audit results, highlighting new internal and external high level risks, cost controls and recommendations for improvements within the Internal Audit department.
• Provide input into an annual risk-based internal audit plan with regards to IT systems and the network in order to ensure adequate quality assurance over risk management.
• Provide expertise, advice and support to management by providing technical insights on new information security risks.
• Provide assurance to management on the effectiveness of the internal controls over information security, internal processes and systems related to both virtual, as well as physical technology assets.