Internal IT System Auditor

Internal IT System Auditor – Nawaloka Hospitals PLC

Job Overview

Nawaloka Hospitals PLC is seeking a detail-oriented and responsible Internal IT System Auditor to evaluate IT systems, controls, security practices, and operational procedures. The selected candidate will support the organization in identifying risks, improving system controls, and ensuring compliance with internal policies and information-security standards.

Required Qualifications

• Bachelor’s degree or professional qualification in Information Technology, Information Systems, Cybersecurity, Auditing, or a related field.
• Knowledge of IT auditing, information-security controls, risk management, and compliance procedures.
• Understanding of computer systems, networks, databases, operating systems, and software applications.
• Familiarity with IT governance and security frameworks such as ISO 27001, COBIT, or ITIL.
• Ability to identify system vulnerabilities, control weaknesses, and operational risks.
• Strong analytical, problem-solving, report-writing, and communication skills.
• Ability to handle confidential information with integrity and professionalism.
• Previous experience in IT auditing, system administration, cybersecurity, or risk management will be an advantage.
• Professional certifications such as CISA, CISM, ISO 27001, or related qualifications will be an added advantage.
• Experience in the healthcare industry will be an advantage.

Key Responsibilities

• Conduct internal audits of IT systems, applications, infrastructure, and operational processes.
• Review user-access controls, system permissions, password policies, and privileged accounts.
• Evaluate the effectiveness of IT security controls and data-protection procedures.
• Identify system risks, security gaps, control weaknesses, and non-compliance issues.
• Review system logs, backup procedures, disaster-recovery plans, and business-continuity arrangements.
• Assess compliance with organizational policies, regulatory requirements, and information-security standards.
• Prepare detailed audit reports with findings, risk ratings, and recommended corrective actions.
• Follow up with relevant departments to monitor the implementation of audit recommendations.
• Support investigations relating to system misuse, security incidents, and policy violations.

How to Apply

Send your CV to:

Email: recruitment@nawaloka.com

Please mention “Internal IT System Auditor” in the email subject line.