About this role
The role is for an IT Auditor in Lagos, employed by Hydrogen Payment Services Company Limited, a Nigerian payment solutions provider and subsidiary of Access Corporation. The position involves providing independent, risk-based assurance on IT controls, payment systems, cybersecurity, and technology governance. The successful candidate will identify control weaknesses, assess regulatory compliance, and recommend improvements to protect systems, data, and payment operations. It requires planning and executing IT general controls, payment systems, risk assessments, regulatory compliance reviews, and delivering audit reports. Collaboration with multiple internal and external stakeholders is expected, including senior management and the Board Audit Committee.
What you would do
- Plan and conduct risk-based audits of IT general controls, applications, infrastructure, databases, networks, cloud services, and technology processes.
- Evaluate IT governance, policies, procedures, and control frameworks; document evidence, weaknesses, and recommendations.
- Assess controls across payment-processing platforms, switching, routing systems, payment gateways, POS, transaction processing, interfaces, settlement, reconciliation, and exception management.
- Evaluate access management, change management, system security, data integrity, backups, and disaster recovery controls; test automated controls and reports.
- Assess regulatory compliance and cybersecurity, including data protection, PCI DSS, ISO standards, vulnerability management, patching, and third-party controls.
- Prepare evidence-based audit reports with findings, risk impact, root causes, and actionable recommendations; track remediation and management responses.
- Escalate high-risk issues and keep Head of Internal Audit informed on significant risks and progress.
- Collaborate with IT, Information Security, Finance, Operations, Risk, Compliance, external auditors, and HoldCo teams for assurance activities.
- Contribute to reporting for senior management and the Board Audit Committee.
What they are asking for
- Bachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related discipline.
- 3 to 5 years of relevant experience in IT audit, technology risk, or information systems assurance, preferably in fintech, banking, payment services, or regulated environments.
- Practical knowledge of IT general controls, application controls, databases, networks, APIs, system interfaces, cybersecurity, business continuity, and disaster recovery.
- Working knowledge of regulatory requirements and IT control frameworks; CISA and PCI DSS certifications are advantageous; CRISC, CISSP, and ISO 27001 Lead Auditor certifications are desirable.
- Strong analytical, problem-solving, audit documentation, report-writing, communication, and stakeholder-management skills; integrity.
Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.