Associate IT Auditor - Data Verification & Field Validation

The Associate QA specialists (Data Verification & Field Validation) carry out the hands-on execution of data verification and field validation testing across the Group’s business applications, under the direction of a supervising auditor. The Associate IT Auditor (EA Data Verification & Field Validation) independently verifies that everything the EA implementation vendor submits into the Strategy, Business and Governance layers of the DEJEM Sparx repository conforms to the DEJEM EA Metamodel, and that the Workflow, SLA, Roles and Issues reports owned by this role can be produced from the repository by formula rather than by hand. Where the repository asserts a real-world fact, the auditor also physically validates it at the asset or site. The role tests that data recorded in the Group’s systems of record is complete, accurate, valid, consistent and traceable to authoritative source evidence — and, where the system asserts a real-world fact, physically validates that fact at the asset or site. This is a doing role, not a designing role. The verification plan, sampling methodology, scope and final opinion are owned by the supervising auditor and the GRC function. The post-holder executes the approved test steps, draws samples strictly by the approved selection method, gathers and indexes evidence, records the result field by field, and raises exceptions for review. The role is checklist-driven and supervised and sits within GRC assurance — independent of the business functions, system owners and third parties whose data is being tested. The post-holder does not correct the data, does not agree scope changes with the auditee, and does not issue the accept or reject decision; exceptions are recorded with the sample and evidence reference and submitted to the supervising auditor and the Deputy VP – Governance, Risk & Compliance, who own the opinion and the onward reporting to management and the Board. Key Roles & Responsibilities : 1- Supervising Auditor (Senior GRC Specialist / Compliance Lead) — issues the verification plan and working-paper template, reviews working papers and clears review points. 2-VP – Governance, Risk & Compliance — onward reporting to the Chairman’s Office and the Board. 3-VP – Governance, Risk & Compliance — onward reporting to the Chairman’s Office and the Board. 4-Digital Transformation Lead – upward reporting of issues . 5-Yardi Functional Consultant – reporting all system-related issues mapped against MMS files 6- Business Analysis and Change Management Lead – reporting quality checks against BPMN flows, process owners and forms 7-Application and platform vendors — support on data extraction, report definitions and system documentation. 8-EA implementation vendor Team — receives findings and performs remediation. 9- Execute approved test steps on assigned data domains, following the verification plan and working-paper template issued by the GRC. 10-Trace each record between source document/ MMS files, system of record (SPARX) and downstream report, recording agreement or difference field by field. 11-Test data attributes for completeness, accuracy, validity and consistency — dates, amounts, counterparty names, identifiers, area and measurement values, status codes and currency. 12-Perform record-count and control-total reconciliations between source, staging and target data sets. 13-Populate the verification workbook fully and legibly: population, sample reference, test step, evidence reference, result and exception classification. 14-Extract system reports, access logs and audit trails, and document the extraction parameters so that the result is reproducible by another person. 15-Prepare working papers to review standard — every conclusion supported by a referenced, retrievable source. 16-Clear all review points raised by the supervisor within the agreed turnaround, without repeating the same correction. 17-Provide accurate data input for management and Board-level reporting . 18-Carry out follow-up re-testing of remediated items and evidence the outcome — management’s confirmation alone is not acceptable as closure. 19-Work in line with Audit and Assurance Standards and Group GRC methodology. Qualifications and Certifications : CISA (ISACA) either (a) certified and in good standing, or (b) examination passed with certification pending completion of the experience requirement, the candidate being within the ISACA five-year window to apply. This is the primary assurance credential for the role. ▪ Bachelor’s degree in accounting, Finance, information systems, computer science, Computer Science, Industrial Engineering or related discipline. ▪ Progress toward a second credential (CIA, CRISC, CDPSE) or a professional accounting qualification — desirable. ▪ TOGAF 10 Foundation (Level 1) preferred at the point of hire. Candidates without it will be enrolled by DEJEM in the course and examination and are expected to pass within six months of joining.— desirable. ▪ ArchiMate 3 Foundation, COBIT 2019 & Sparx Enterprise Architect training — desirable. 2 to 4 years in IS audit, internal audit, IT assurance, data quality, or a data-intensive operation or finance role carrying testing responsibility. ▪ A demonstrable testing orientation is required — drawing a sample, tracing a record to its source and documenting the result. A background purely in help desk, data entry, or unrelated administration will not support these checks. ▪ Experience of data migration, system implementation or post-implementation review — desirable.