ICT Internal Auditor Officer

JOB DETAILS:Reports To Senior Internal Auditor ICT Mission & Objectives To support the execution of risk-based ICT audits by assessing information systems, technology operations, cybersecurity controls, IT governance processes and related controls to determine their adequacy, effectiveness and compliance with organizational policies, applicable laws, regulations and recognized ICT standards. The role is responsible for carrying out ICT audit procedures, identifying ICT risks and control weaknesses, documenting audit evidence and contributing to practical recommendations aimed at enhancing the security, reliability, integrity, availability and efficiency of the organization’s ICT systems and operations. Job Purpose & Impact The job holder contributes to effective ICT governance, risk management and internal controls by providing independent assurance over UEDCL’s information systems and technology operations. Through timely identification and reporting of ICT risks, control weaknesses and compliance gaps, the position supports the organization in reducing exposure to cybersecurity incidents, data loss, system failures, unauthorized access and operational disruptions while improving the reliability and effectiveness of ICT services supporting UEDCL objectives. Working Environment Office-based environment with regular interaction with ICT personnel, system owners, process owners and other organizational stakeholders. This role may require access to ICT infrastructure, systems, data centres and operational locations for purposes of conducting audit procedures. May require travel to different organizational locations or duty areas as necessary to undertake ICT audit assignments. Requires continuous professional development to remain abreast of emerging technologies, cybersecurity risks, ICT regulations and professional auditing practices. Key Responsibilities Support the planning and execution of risk-based ICT audits in accordance with the approved Internal Audit Annual Operational Plan, audit methodologies and established professional standards. Assess adherence to recognized ICT governance, risk and security frameworks and good practices, including COBIT, ISO 27001 and other relevant standards as applicable. Perform audit reviews of ICT infrastructure, systems, applications, databases, networks and technology-related processes to assess the adequacy, effectiveness and efficiency of controls. Assess ICT risks and controls relating to cybersecurity, access management, data protection, system availability, change management, IT operations, disaster recovery, business continuity and information integrity. Prepare complete and accurate audit working papers documenting audit procedures performed, evidence obtained, analyses undertaken and conclusions reached. Support the preparation of ICT audit reports by providing well-supported findings, conclusions and practical recommendations to strengthen ICT controls and risk management. Follow up agreed ICT audi

Verified vacancy originally published on 2026-11-03. Discovered via verified recruitment channels.