Reports To
Senior Internal Auditor ICT
Mission & Objectives
To support the execution of risk-based ICT audits by assessing information systems,
technology operations, cybersecurity controls, IT governance processes and related
controls to determine their adequacy, effectiveness and compliance with organizational
policies, applicable laws, regulations and recognized ICT standards.

The role is responsible for carrying out ICT audit procedures, identifying ICT risks and
control weaknesses, documenting audit evidence and contributing to practical
recommendations aimed at enhancing the security, reliability, integrity, availability and
efficiency of the organization’s ICT systems and operations.
Job Purpose & Impact
The  job holder contributes to effective ICT governance, risk management and internal
controls by providing independent assurance over UEDCL’s information systems and
technology operations.

Through timely identification and reporting of ICT risks, control weaknesses and
compliance gaps, the position supports the organization in reducing exposure to
cybersecurity incidents, data loss, system failures, unauthorized access and operational disruptions while improving the reliability and effectiveness of ICT services supporting UEDCL objectives.
Working Environment
• Office-based environment with regular interaction with ICT personnel, system
owners, process owners and other organizational stakeholders.
• This role may require access to ICT infrastructure, systems, data centres and
operational locations for purposes of conducting audit procedures.
• May require travel to different organizational locations or duty areas as necessary
to undertake ICT audit assignments.
• Requires continuous professional development to remain abreast of emerging
technologies, cybersecurity risks, ICT regulations and professional auditing
practices.
Key Responsibilities
1. Support the planning and execution of risk-based ICT audits in accordance with
the approved Internal Audit Annual Operational Plan, audit methodologies and
established professional standards.
2. Assess adherence to recognized ICT governance, risk and security frameworks and
good practices, including COBIT, ISO 27001 and other relevant standards as
applicable.
3. Perform audit reviews of ICT infrastructure, systems, applications, databases,
networks and technology-related processes to assess the adequacy, effectiveness
and efficiency of controls.
4. Assess ICT risks and controls relating to cybersecurity, access management, data
protection, system availability, change management, IT operations, disaster
recovery, business continuity and information integrity.
5. Prepare complete and accurate audit working papers documenting audit
procedures performed, evidence obtained, analyses undertaken and conclusions
reached.
6. Support the preparation of ICT audit reports by providing well-supported
findings, conclusions and practical recommendations to strengthen ICT controls
and risk management.
7. Follow up agreed ICT audit recommendations and management action plans and
validate the implementation status of corrective actions.
8. Maintain proper custody, confidentiality and integrity of audit information and
evidence obtained during audit assignments.
9. Maintain awareness of emerging ICT risks, cybersecurity threats, technologies and
regulatory developments and apply relevant knowledge during ICT audit
engagements.
10. Provide input into ICT risk assessments and the development of ICT audit
programmes based on knowledge gained from previous audits, emerging risks
and changes within the ICT environment.
11. Collaborate effectively with other Internal Audit team members and relevant
stakeholders during integrated, operational, financial and ICT-related audit
assignments.
12. Perform any other ICT audit-related duties assigned by the Senior Internal Auditor
ICT or Internal Audit management in accordance with the mandate of the Internal
Audit function.
Eligibility & Requirements

Qualifications, experience, and skills needed for this role.
Education
• Bachelor’s degree in Computer Science, Information Technology, Information
Systems, Computer  Engineering, Cybersecurity or a related field.
• Professional certification or progress towards obtaining a relevant certification
such as Certified Information Systems Auditor (CISA), Certified in Cybersecurity
(CC), Certified Information Systems Security Professional (CISSP), Certified in
Risk and Information Systems Control (CRISC), or equivalent is an added
advantage.
• Affiliate membership to a relevant professional body is desirable.
Experience
• Minimum of three (3) years of relevant experience in ICT auditing, information
technology, cybersecurity, IT risk management, information systems controls or a
related field.
• Practical knowledge of ICT controls, cybersecurity principles, IT governance and
information systems risk management.
• Experience in the use of data analytics or computer-assisted audit techniques is an
added advantage.
• Experience within the utility, energy or other regulated sector is an added
advantage.
Required Competencies
• Knowledge of ICT audit methodologies and risk-based internal auditing
principles.
• Understanding of IT governance and control frameworks such as COBIT, ISO
27001, NIST and other relevant standards.
• Knowledge of cybersecurity risks and controls.
• Understanding of IT general controls, including User access and identity
management; Change management; IT operations; Backup and recovery; Disaster
recovery and business continuity; Incident and problem management; and
Information security management.
• Basic understanding of application controls, databases, operating systems,
networks and cloud computing environments.
• Ability to use data analytics and computer-assisted audit tools to support audit
testing.
• Ability to evaluate ICT processes, identify control weaknesses and recommend
practical corrective actions.
• Ability to prepare clear, complete and properly referenced audit working papers.
• Good understanding of relevant ICT policies, laws, regulations and data protection
requirements.

Behavioural Competencies
• Strong analytical and critical-thinking skills.
• High attention to detail and accuracy.
• Strong problem-solving ability.
• Good written and verbal communication skills.
• Ability to prepare clear and concise audit observations and reports.
• Good interpersonal and stakeholder-engagement skills.
• Ability to work effectively both independently and as part of an audit team.
• Ability to manage assigned tasks and deliver within agreed timelines.
• High level of integrity, professional ethics and confidentiality.
• Willingness and ability to continuously learn and adapt to emerging technologies,
cybersecurity threats and ICT risks.
• Objectivity, professional scepticism and sound judgement in carrying out audit
assignments.

Deadline: 15/11/2026

CLICK HERE TO APPLY