Senior Manager: Information Systems Audit (Cybersecurity)

In brief

**Overview** This Senior Manager position at the Auditor-General of South Africa (AGSA) is a strategic role focused on Information Systems Audit, specifically within the Cybersecurity domain. The role involves providing strategic input to the Business Unit (BU), leading the effective execution of cybersecurity audits, and driving innovation and thought leadership in the cyber audit space. The incumbent will manage a comprehensive portfolio of audits, including planning, execution, and reporting, while also overseeing significant stakeholder engagement, people management, and financial and operational management responsibilities within their centre. The position aims to strengthen AGSA's cybersecurity assurance and position it as a leader in the field, both locally and internationally. **What you will do** * **Strategic Function:** * Provide input into strategic objectives to help establish the strategic direction of the Business Unit (BU). * Facilitate the implementation of the BU and Specialised Audit Solutions (SAS) strategic plans in accordance with policies, procedures, and legislation. * Manage teams to ensure alignment with the vision, mission, strategic goals, and values of the Auditor-General of South Africa (AGSA). * Provide feedback on the implementation and achievement of strategic objectives to relevant stakeholders. * **Strategic Leadership & Innovation:** * Ensure the effective execution of cybersecurity audits. * Drive innovation, efficiency, and effectiveness in the cyber audit space. * Identify emerging risks, leverage new audit techniques, and enhance audit methodologies to strengthen AGSA’s cybersecurity assurance. * **Thought Leadership & Brand Building:** * Act as a key driver in positioning AGSA as a cybersecurity audit leader, both locally and internationally. * Contribute to knowledge-sharing platforms and engage at all levels. * Collaborate with INTOSAI and other key stakeholders to shape the future of cybersecurity audit excellence. * **Product Management - Manage Audits:** * Lead, direct, and coordinate a portfolio of audits covering three audit phases: Planning, Execution, and Reporting. * Liaise with auditees to provide advice/recommendations and set up meetings. * Initiate and lead meetings with the audit team regarding the direction and progress of audits. * Provide guidance to managers and assistance on audit-related matters. * Ensure all risks are addressed for specific audit engagements, including the appointment of specialist staff and contract management (in and out). * Conduct audit team visits to review work, finalise the audit, conclude working papers, and prepare audit reports. * Attend meetings with the team and auditees. * Provide motivation talks and training on auditing matters to team members. * Engage with contracted out partners. * Project manage all projects to ensure timeous delivery on milestones and quality of delivery. * Perform functions as required by an engagement manager as specified in the ISAs and the Auditor-General policies. * Prepare and take responsibility for presentations. * Report back to audit steering committees and audit committees on the planning, execution, and reporting of audits. * Manage audits within the allocated time frame. * Manage audits in accordance with policies, procedures, and legislation. * **Stakeholder Management:** * Ensure a clear understanding of auditees’ business requirements through efficient stakeholder engagement and translate this into clear deliverables. * Build collaborative relationships with internal and external stakeholders. * Liaise and interact with key stakeholders & management to share information, resolve challenges, and make recommendations for improvements. * Manage and report on stakeholder engagements. * Promote the AGSA brand and reputation. * Participate in Business Unit Leader/Deputy Business Unit Leader Discussions. * Inform the Business Unit Leader and/or the Deputy Business Unit Leader on issues arising from audits, focus areas for auditing administration matters, financial issues, compliance concerns, and people and resourcing matters. * Manage Internal Stakeholder Relationships: Engage with regularity audit on audit proceedings, facilitate debriefing sessions, engage with the team during planning, execution, and reporting phases, communicate with the team on non-audit and strategic matters, and liaise with colleagues within the BU and portfolio. * Manage External Relationships: Engage regularly with the management of the auditee on audit proceedings, engage with audit firms regarding contracted out audits, participate in audit and steering committee meetings, attend Standing Committee on Public Accounts (SCOPA) and portfolio committee meetings by invitation, and engage with prospective employees. * **People Management:** * Implement the activities outlined in the BU People Plan. * Manage team performance to drive productivity. * Contribute to transformation/culture plans. * Motivate, coach, and mentor staff to ensure maximum productivity and development to their full potential. * Participate in initiatives to attract talent. * Contribute to the effective administration of the BU training office. * Cascade strategic organisational alignment messages and commitments. * Implement relevant centre initiatives to bring about an inclusive culture, enhanced employee experience, and employee well-being. * Analyse the business plan to determine applicable deliverables and targets. * Determine and secure human resource requirements to ensure deliverables are met. * Manage the staff performance evaluation system for the centre, including compiling Individual Performance Contracts (IPCs) and Performance Development Plans (PDPs), conducting coaching sessions, conducting performance reviews, and conducting one-on-one sessions. * Participate in the talent management of the Business Unit to drive a high-performance culture. * Manage the development of staff and ensure each staff member has a Personal Development Plan. * Approve leave, timesheets, subsistence and travel (S&T), and cash advances. * Act as a champion on one of the five strategic goals of the business unit. * Manage the centre’s resources (staff, Contract Work Contractors (CWC), and funding). * Participate in meetings, provide direction and guidance, develop staff, and improve client relations. * Manage Human Resources in accordance with policies, procedures, and legal requirements. * Complete Human Resource Management actions within allocated time frames. * **Financial Management and Operational Management:** * Responsible for compiling the centre budget. * Manage the centre budget (income and cost) to ensure adherence to required financial performance standards. * Manage debtor’s collection. * Ensure compliance with internal processes and procedures. * Manage supply chain processes. * Conduct centre risk assessment. * Analyse the business plan for the Business Unit to determine the financial requirements for the centre. * Consult with relevant stakeholders to determine requirements in terms of expenditure. * Compile the comprehensive budget. * Submit the budget for approval. * Monitor expenditure against the budget. * Approve purchase orders. * Ensure debtor payments are followed up and creditors are paid timeously. * Assist RA with the verification of invoices. * Manage and monitor CWC budgets. * Ensure that only authorised overspending is approved. * Consult relevant role players where overspending occurred and take corrective actions. * Monitor the centre budget to ensure figures balance. * Conduct budget reviews and adjust where necessary. * Close the budget at the end of the financial year. * Manage centre budget in accordance with policies, procedures, and legal requirements. * Complete centre budget management actions within allocated time frames. * **Other Responsibilities Applicable to All JD’s:** * Perform and/or manage other projects, tasks, and assignments not stipulated on the Job description as and when required. * Monitor Information: Track audits (own and CWC), stakeholder engagements, funding (income and expenditure), IPCs, HR/Culture Initiatives, Balanced Scorecard Initiatives, BU Initiatives, and Compliance matters (internal control). **Requirements (from the original advert)** * **Formal Education:** * Minimum qualification of National Qualifications Framework (NQF) Level 7 (i.e., a 4-year Bachelor’s Degree / post-graduate Diploma, e.g., B Com with specialisation in Auditing and/or Information Technology). * Certified Information Systems Auditor (CISA) or equivalent (e.g., a recognised IT auditing certification). * AND at least one of the following: Offensive Security Certified Professional (OSCP) or equivalent (e.g., CEH); Certified Incident Handler (ECIH/ GCIH) or equivalent (e.g., CRIA). * **Experience:** * Minimum of 8 years’ experience post-qualification, with at least 4 years’ experience operating at a manager/middle management level. * Extensive experience in managing cybersecurity and network security audits, with a strong understanding of networked environments that support various application hosting infrastructures, including Windows and Unix-based operating systems, as well as MSSQL and Oracle databases. * Extensive experience in conducting cybersecurity maturity assessments, particularly within the Southern African context. This includes a strong ability to position insights and control recommendations for clients, guided by leading frameworks such as NIST CSF, ISO 27001/2, CIS, and COBIT. **Who should apply** This role is suited for an experienced professional with a strong background in information systems and cybersecurity auditing, coupled with significant managerial experience. The ideal candidate will possess relevant NQF Level 7 qualifications and specific certifications such as CISA, OSCP/CEH, and/or ECIH/GCIH. They should have extensive practical experience in managing complex cybersecurity and network security audits, deep knowledge of various operating systems and databases, and proven expertise in conducting cybersecurity maturity assessments using industry-leading frameworks, especially within Southern Africa. Strong leadership, strategic thinking, innovation drive, and capabilities in stakeholder, people, and financial management within an audit context are essential. **Deadline** 31 October 2026 **Reference** Original posting: https://www.myjobmag.co.za/job/senior-manager-information-systems-audit-cybersecurity-auditor-general-of-south-africa-1 Source: myjobmag

Summary drafted with AI assistance from the original advert. The advert itself is the authority — how we use AI.

Job description

Before you apply

• Confirm the requirements and closing date on the original listing (myjobmag). SPANi lists vacancies from other sites and may not reflect last-minute changes.
• Legitimate employers do not charge application, registration or training fees.
• Don't send your ID or bank details before you have confirmed the employer is real.

How to spot a job scam

Before you apply

• Read the full advert and confirm you meet the minimum requirements before applying.
• Tailor your CV headline and most recent experience to the job title and key skills.
• Note the closing date and reference number, and keep a copy of what you submit.
• Apply only through the employer or job board link — never pay to apply.