Information Systems Auditor

A leading organization in Harare invites applications from suitable qualified, experienced and results-oriented professionals for the position of Information Systems Auditor.

Job Summary

• Job Type: Full-time
• Location: Harare, Zimbabwe
• Category: Audit
• Closing Date: 2026-11-11

Key Responsibilities

• Planning and conducting risk-based information systems audits in accordance with approved audit plans and professional standards.
• Assessing IT governance, technology-related risks, cybersecurity arrangements and compliance with applicable policies, legislation and regulatory requirements.
• Evaluating IT general controls, application controls, system access management, change management and IT operational controls.
• Auditing business applications, including financial, payroll, procurement, inventory and other operational systems.
• Assessing data integrity, database security, information management practices and the reliability of system-generated reports.
• Using data analytics and computer-assisted audit techniques to identify anomalies, irregular transactions and potential control weaknesses.
• Reviewing IT projects, system implementations, upgrades, integrations and data migration processes.
• Evaluating business continuity arrangements, IT disaster recovery plans, data backups and system resilience.
• Assessing IT procurement, asset management, software licensing, outsourced services and third-party technology risks.
• Preparing audit working papers, reports and practical, risk-based recommendations.
• Following up on audit findings and verifying the implementation of agreed corrective actions.
• Supporting authorised investigations into suspected fraud, unauthorised system access, data manipulation and other technology-related irregularities.
• Communicating significant IT risks and control deficiencies to the Internal Audit Manager and other relevant governance structures.

Requirements

• A Bachelor's Degree in Information Systems, Computer Science, Information Technology, Cybersecurity, Accounting, Auditing or a related field.
• At least 3-5 years of relevant experience in information systems auditing, technology risk, IT controls, cybersecurity assurance or internal auditing with substantial IT exposure.
• Demonstrable experience in planning and executing IT audits, testing IT general and application controls, preparing audit working papers and compiling audit reports.
• Familiarity with data analytics tools and computer-assisted audit techniques.
• Exposure to enterprise resource planning (ERP) systems, financial applications, databases, networks, access management and system change controls.
• Professional Certification in Information Systems Auditing (CISA), Internal Auditing (CIA), Information Security (CISM or CISSP), Technology Risk (CRISC), or relevant COBIT or ISO/IEC 27001 training or certification.
• Experience in systems implementation audits, business continuity, disaster recovery and third-party technology risk management.
• Experience in regulated, financial, manufacturing, mining or other operationally complex environments.
• Strong analytical, investigative and problem-solving skills.
• Sound knowledge of IT audit methodologies, information security and technology risk management.
• Excellent report-writing, communication and stakeholder engagement skills.
• Attention to detail and a high level of integrity.

How to Apply

Interested and suitably qualified candidates should submit their applications, a detailed CV, certified copies of academic and professional qualifications in a single PDF document to Recruitment@fgr.co.zw by 11th November 2026 with Information Systems Auditor as the subject line. Only shortlisted candidates will be contacted for interview. Your information will be used for selection purposes only.