Sasol (USA) Corporation has an opening for a Senior IT Auditor – Information Security. This position reports to the Sr. Manager US Operations & Mega Projects and is located in Houston, TX. Below are details of the position:
In accordance with the Sasol Assurance Services (SAS) Charter as approved by the Sasol Limited Audit Committee:
To direct and execute the IT project and governance audits of the Sasol Group.
To ensure that the quality of audits executed are in alignment with the Sasol Assurance Services Operating Manual (SASOM)
Manage the allocation of audit resources on assignments and projects
Manage the execution of IT Audit audits and act in the role of a subject matter expert for audits managed and executed.
Manage the execution of audits to be within budgeted planned hours.
Ensure timely reporting of assigned audit tasks and follow established reporting protocols.
Integrate with other departments with regard to knowledge sharing on audit tasks being managed and executed.
Act as liaison with clients
Audit task planning
Review/ compiling of the planning memorandum to ensure focus on high risks
Review/ compiling of the audit program to ensure audit objectives are met
Audit execution / reporting
Review/ prepare audit evidence supporting the reported findings in the audit report
Manage the execution of the audits and execute own audits to ensure factual and timely reports with flexibility to adapt to change
Plan/ execute overseas audits when required
Internal Audit Reporting
Periodically compile status reports to all relevant stakeholders for area of specialization and VP: Projects and Combined Assurance and/ or CAO, as appropriate and in accordance with the Reporting Protocol
Prepare report on quarterly basis for the GEC and the Sasol Limited Audit Committee on significant governance issues identified and progress against annual audit plan for area of specialization
Factual, comprehensive and timely reporting to SBU's/OBU's/ROH's management, Governance Committees, Boards and relevant stakeholders
Review all audit reports prior to submission to Head of IT Audit and ensure that all reporting protocols are observed
Conduct review of audit working papers
Assist in conducting quarterly peer reviews of audit working papers
Complete task assessments of all team members of audit tasks managed and take appropriate corrective actions to ensure corrective measures for quality concerns identified.
On request review policy and procedures
Attend and provide specialist advice on request at Project Steering committee meetings or client meetings
Ad hoc requests for specialist advice
Special Ad hoc Requests
Conduct specific ad-hoc audit requests as and when required
Communicate and assess the relevance of requests from business management to line manager and allocate resources as necessary
Execute special requests by the Audit Committee as and when required
Audit planning and management
Assist in developing an annual audit plan for area of responsibility – IT projects and governance
Develop/Execute a functional work plan and schedule in order to execute and to complete the IT audit plan based on priorities and risks with flexibility.
Weekly feedback to Head of IT Audit on resource requirements, audit status and budget control of audits allocated and managed by self to enable effective scheduling of annual audit plan.
Perform allocated audit, management and/or administrative tasks as and when allocated by the Head of IT Audit
Sasol Assurance Services Management
Maintain and update standard audit programs
Support the developed tactical plans to support the implementation of the Sasol Assurance Services and IT Audit strategy
Act as a change manager and assist in driving the implementation of innovative improvements and tactical changes to Projects & Combined Assurance processes and systems effectively and efficiently
Stay abreast of new developments in the assurance and IT information security, project and governance environments and make recommendations on necessary changes
Lead team and be a role model for Sasol values
Manage delivery to ensure requirements of the Sasol Limited Audit Committee in terms of our performance measures are met
Manage team effectiveness
Communicate requirements and assist in implementing skills improvement and team development through training and exposure
Proactively engage and share knowledge with other teams in order to drive integration between all departments within Assurance Services
Values and Ethics
Being a role model in living the Sasol shared values and complying with the Code of Ethics and Guide to Code of Ethics.
Experience and/or Educational Requirements:
Bachelor’s Degree with Information Security, Information Management and auditing related subjects as majors
10+ years’ of relevant experience (of which at least 2 years supervisory experience), including articles (three years relevant experience at an audit firm)
CPA with specific auditing experience in Information Security, in addition to Information Technology / Information Management.
Subject matter expertise focusing on Information Security / Cyber security:
IT/ IM related auditing using Cobit as basis (IT Governance, Information security, General IT controls, Applications controls and emerging technologies audits);
Information security audits within the business and industrial control systems environments;
IT project life-cycle framework (Waterfall and Agile);
Emerging technologies, and
Data analytics and computer assisted auditing techniques.
Certified in (CISA, CISSP, CISM, CEH and ISSAP) is a plus
Relocation expenses are negotiable.
Internal Number: 74318
About Sasol Chemicals
Sasol is an international integrated chemicals and energy company that leverages technologies and the expertise of more than 30,000 people working in more than 30 countries. We develop and commercialize technologies, and build and operate world-scale facilities to produce a range of high-value product streams, including liquid fuels, chemicals and low-carbon electricity.
In North America, Sasol has operations in Arizona, Louisiana, Pennsylvania and Texas. Collectively, these sites employ a workforce of approximately 1,500 and manufacture the primary ingredients in detergents, personal care products, waxes and specialty products used as abrasives, catalysts, thickeners, ceramics and more.
Sasol is building a world-scale petrochemical complex near its existing site in Southwest Louisiana. The project will roughly triple the company's chemical production capacity in the U.S. and enable it to build on its strong positions in robust and growing global chemical markets.
Based in Johannesburg, South Africa, Sasol is listed on the Johannesburg and New York stock exchanges.