Years of professional experience
Kevin Mlangeni
Internal Auditing, Risk Management, Compliance and Governance
Pretoria
Overview
15
15
1
1
Certificate
6
6
Years in senior management
7
7
Years of project management
Summary
Seasoned auditing professional knowledgeable about risk aversion strategies, cost reduction options and financial processes. Decisive and persuasive communicator with proven problem-solving, leadership and planning abilities. Resourceful Auditing professional with 14 years of experience in audit preparation and reporting. Organized and dependable candidate successful at managing multiple priorities with a positive attitude. Willingness to take on added responsibilities to meet team goals. Knowledgeable about Risk management equipped with strategic planning and program leadership abilities honed in various industry environments. Familiar with regulatory requirements to maintain strict controls. Strong leader and problem-solver dedicated to streamlining operations to decrease costs and promote organizational efficiency. Knowledgeable about compliance with documented success in developing policies, leading training programs and managing reporting to achieve compliance. Methodical with exceptional presentation and communication skills.
Accomplishments
- Successfully established and formalized the Audit, Risk, and Compliance Department at Kapsch TrafficCom South Africa by developing and implementing comprehensive frameworks, policies, and procedures. Supervised and mentored audit teams, ensuring high-quality audit work that adhered to professional standards and contributed to continuous improvement.
- Developed the Business Continuity Management (BCM) framework, and set in place the strategic, tactical, and operational plans to safeguard Kapsch TrafficCom's operations against business disruptions.
- Developed and implemented the Whistle-Blowing and Anti-Fraud Policy at Kapsch TrafficCom, providing a structured and transparent system for employees to report unethical behaviour, fraud, and misconduct.
- Through serving as a Project and Risk Consultant, I played a critical role in ensuring the successful completion of a fully automated mega Distribution Centre in Hammarsdale KZN for the Mr Price Group.
- Served as an IT Application Controls consultant during the design and build phase of the Department of Mineral resources' Mining Rights Application System.
Work History
HEAD OF DEPARTMENT: AUDIT, RISK AND COMPLIANCE
Kapsch TrafficCom-ZA
Pretoria
4 2021 - Current
- Develop and implement the overall strategy for the Audit, Risk, and Compliance functions, ensuring alignment with the organization’s goals and objectives
- Provide leadership and direction to the department, managing a team of 6 auditors, 2 risk managers, and 3 compliance officers
- Work with senior management and the board of directors to provide insights and recommendations on risk management and compliance issues.
- Increased efficiency in audit processes by leveraging data analytics tools and automating routine tasks.
- Trained and mentored department staff on policies and procedures to establish strong foundation for client development and service activities.
- Collaborated with cross-functional teams to conduct comprehensive audits across various business units.
- Streamlined internal controls by conducting thorough reviews and recommending effective solutions.
- Ensured timely completion of all assigned engagements while maintaining high-quality deliverables throughout the process.
- Conducted detailed financial analysis for key accounts, identifying trends and potential risks to inform strategic decision making.
- Conducted strategic and technical reviews to verify compliance with quality control standards, schedule constraints and budget parameters.
- Identified areas of improvement in financial reporting processes, resulting in increased efficiency and accuracy.
- Enhanced audit quality by implementing risk-based procedures and ensuring adherence to regulatory standards.
- Evaluated the effectiveness of corporate governance structures, mitigating potential risks within organizational frameworks.
- Developed high-level knowledge of client business goals, policies and procedures to establish foundation for targeted problem solutions.
- Improved client relationships through clear communication, timely responses, and consistent follow-ups on audit findings.
- Prepared accurate audit reports that clearly communicated findings and recommendations to management teams.
- Collaborated with external auditors to reconcile discrepancies found during concurrent audits while reducing duplicative work efforts.
- Fostered a culture of continuous improvement within the audit department by identifying opportunities for process optimization and implementing best practices.
- Assessed operational inefficiencies during audits to recommend actionable improvements that streamline business processes.
- Mitigated fraud risk by designing targeted audit procedures aimed at detecting fraudulent activities within organizations.
- Assisted clients with information technology project development and execution to facilitate positive outcomes and strengthen business relationships.
- Prepared working papers, reports and supporting documentation for audit findings.
- Collaborated with accounting manager to comply with governing bodies and limit regulatory risks.
- Improved overall business performance by assisting various departments in creating action plans based on audit findings and recommendations.
- Played a key role in the successful implementation of new systems and processes by providing expert guidance on risk management, control design, and regulatory compliance.
- Conducted thorough financial, operational, and IT audits for various departments, identifying weaknesses in controls and providing recommendations for improvements.
- Promoted ethical conduct throughout the company by fostering a culture that values accountability, integrity, transparency, and professionalism among employees.
- Reviewed organizational policies to ensure alignment with industry regulations, reducing the likelihood of non-compliance issues arising in future audits.
- Supported efficient resource allocation by prioritizing high-risk areas for auditing based on an ongoing assessment of organizational needs and objectives.
- Provided valuable insights on business operations through detailed data analysis and risk assessments.
- Contributed significantly to the development of a robust corporate governance framework through regular evaluation of internal controls and risk management systems.
- Developed comprehensive internal audit plans to address key risks and ensure compliance with regulatory requirements.
- Strengthened company''s control environment by conducting periodic testing of key controls and monitoring remediation efforts as needed.
- Advanced the reputation of the Internal Audit function within the organization by consistently delivering high-quality work that added value to business operations.
- Streamlined workflow efficiency for the Internal Audit department by identifying areas of improvement and implementing necessary changes.
- Increased transparency within the organization by designing clear communication channels for reporting audit results to stakeholders at all levels of management.
- Coordinated with external auditors during annual reviews to provide necessary information and support their efforts in validating financial statements.
- Collaborated effectively with cross-functional teams to identify, assess, and mitigate potential risks within the organization.
- Maintained up-to-date knowledge of industry trends and best practices through regular participation in professional development opportunities such as conferences, workshops, and training courses.
- Managed multiple audit projects simultaneously, ensuring timely completion of each assignment while maintaining high-quality deliverables.
- Assisted senior management in developing risk management strategies by presenting findings from internal audits and recommending corrective actions.
- Enhanced internal audit processes by implementing risk-based strategies and methodologies.
AUDIT AND COMPLIANCE MANAGER
Kapsch TrafficCom-ZA
Pretoria
10.2018 - 03.2021
- Collaborated with management to develop action plans to address identified issues, fostering a proactive approach to risk management.
- Performed root cause analyses on identified issues, providing actionable recommendations for long-term improvements in business practices.
- Ensured adherence with 2 prominent professional standards in all aspects of the audit process, upholding the integrity of audit work performed.
- Increased compliance with regulations through regular monitoring of internal controls and procedures.
- Maintained detailed records of completed audits for reference purposes, ensuring easy access to historical information when needed.
- Evaluated the effectiveness of implemented internal controls by regularly reviewing policies and procedures for compliance with regulatory requirements.
- Developed comprehensive audit plans to address identified risks, ensuring timely and effective execution.
- Managed cross-functional teams in conducting complex audits across various departments, ensuring accurate results and recommendations.
- Conducted regular follow-up reviews on a monthly basis to ensure that previously identified concerns were addressed appropriately in a timely manner.
- Leveraged data analytics to enhance the efficiency and accuracy of internal audits conducted.
- Enhanced audit efficiency by implementing risk-based audit strategies and streamlining processes.
- Contributed to continuous improvement efforts within the department by sharing best practices and offering constructive feedback on existing processes.
- Oversaw timely completion of annual audit schedules, coordinating resources efficiently to meet deadlines without compromising quality.
- Improved team performance by providing ongoing training, guidance, and mentorship.
- Facilitated clear communication between auditors and stakeholders regarding findings, promoting transparency throughout the entire audit process.
- Strengthened the company''s overall control environment by identifying weaknesses and recommending corrective actions.
SENIOR IT LEAD AUDITOR
Mr Price Group Limited
Durban
10.2014 - 09.2018
- Established strong working relationships with colleagues across various departments, fostering collaboration while conducting joint audits.
- Continuously facilitated knowledge sharing among 5 separate audit teams through regular training sessions and workshops focused on industry best practices and trends in IT auditing.
- Participated in special projects as needed, such as assisting with due diligence activities for potential acquisitions or supporting company-wide initiatives related to information security standards compliance.
- Performed root cause analyses to identify underlying issues contributing to control deficiencies, enabling more targeted recommendations for corrective actions.
- Maintained up-to-date technical expertise by attending relevant conferences, webinars, and professional development courses to stay abreast of industry advancements in IT auditing methodologies.
- Enhanced system security by conducting comprehensive IT audits and identifying potential vulnerabilities.
- Assisted in the development of annual audit plans, prioritizing high-risk areas for review based on risk assessments and management input.
- Supported management in making informed decisions related to technology investments by providing thorough risk assessments and cost-benefit analyses.
- Mitigated risks for the organization through timely identification of IT control weaknesses and recommending effective solutions.
- Maintained comprehensive documentation of audit findings, recommendations, and management responses, allowing for effective tracking of progress towards resolution.
- Streamlined audit processes by utilizing advanced data analytics techniques, reducing time spent on manual tasks.
- Promoted a culture of continuous improvement within the IT department by encouraging open communication channels for feedback regarding audit findings and recommendations.
- Monitored resolution of bugs, tested fixes, and helped developers tackle ongoing problems by providing QA perspective.
- Demonstrated adaptability by successfully completing ad hoc audit requests with tight deadlines or unique scope requirements.
IT INTERNAL AUDIT SPECIALIST
The Department of Mineral Resources
Pretoria
01.2010 - 09.2014
- Participated in IT governance initiatives, contributing to the development of robust policies and standards for consistent information security management across the organization.
- Monitored emerging trends in IT auditing methodologies, adopting innovative techniques for more accurate risk analysis results.
- Enhanced IT security by conducting comprehensive audits and identifying potential risks within the organization.
- Performed periodic penetration testing, detecting vulnerabilities that could compromise the integrity of critical systems and applications.
- Assisted in developing disaster recovery plans, ensuring critical systems could be rapidly restored following a catastrophic event.
- Evaluated internal controls and processes, streamlining workflows for increased efficiency and risk mitigation.
- Developed detailed audit reports to assist management in implementing appropriate security measures for optimal data protection.
- Provided expert advice on regulatory compliance matters, supporting the organization in achieving and maintaining required certifications and standards.
- Conducted regular vulnerability assessments, proactively addressing weaknesses before they could be exploited by external threats.
- Partnered with the IT team to investigate and resolve cybersecurity incidents, minimizing potential damage and restoring normal operations as quickly as possible.
- Assessed compliance with regulatory requirements, ensuring timely remediation of identified issues and avoiding potential penalties.
- Collaborated with cross-functional teams to ensure adherence to industry best practices, resulting in improved cybersecurity posture.
- Managed audit projects from inception to conclusion, delivering high-quality outcomes aligned with organizational objectives and stakeholder expectations.
- Reviewed system configurations and access controls, strengthening overall network security and reducing unauthorized access incidents.
- Identified opportunities for process improvements within IT department by analyzing current operational structures and recommending strategic changes when necessary.
- Performed risk analyses with heads of departments and risk champions on quarterly basis to identify appropriate security countermeasures.
- Conducted 1 security audit per quarter to identify vulnerabilities.
- Recommend improvements in security systems and procedures.
- Developed plans to safeguard computer files against modification, destruction, or disclosure.
Certification
ISO/IEC 27001 Senior Lead Auditor
Education
Certified Internal Auditor - Internal Auditing
The Institute of Internal Auditors
South Africa 01.2024 - Current
Senior Management Pre-entry Programme - Management Science
The National School of Government
South Africa 08.2024 - Current
Advanced Project Management - Project Management
University of The Free State
Free State 01.2023 - 11.2023
Certified ISO/IEC 27001 Senior Lead Auditor - Information Security Management Systems
Professional Evaluation And Certification Board
South Africa 01.2020 - 07.2020
BCom Honours in Internal Auditing - Internal Auditing
University of Pretoria
Pretoria 01.2010 - 12.2010
BCom Internal Auditing - Internal Auditing
University of Pretoria
Pretoria 01.2007 - 12.2009
Skills
Technical knowledge of the Institute of Internal Auditors Internal Standards for the Professional Practice of Internal Auditing and Code of Ethics
Knowledge and understanding of the King IV Report
Knowledge and understanding of COSO Enterprise Risk Management and Control Framework
Knowledge and understanding of ISO 31000 Risk Management
Knowledge and understanding of ISO 9000 Quality Management
Knowledge and understanding of ISO27000 Information Security Management Systems
Knowledge and understanding of ISO 22301 Business Continuity Management System
Knowledge and Understanding of COBIT 5 framework for the governance of enterprise IT
Knowledge and Understanding of Information Security/Cyber Security
Knowledge and Understanding of Project Management Frameworks: Agile, Waterfall, Scrum, Prince2, PMBOK, Critical Path
Knowledge and Understanding of Public Legislation such as the PFMA and MFMA
Microsoft Office Suite proficiency
CaseWare Data Analysis software
Teammate audit management software
Hold a driver's license
Compliance Monitoring and Reporting
Quality Assurance Practices
Process Mapping
Annual Audit Plans
Ethics and integrity
Business process improvement
Audit Planning and Execution
Contract review and analysis
Audit Committee
Internal control evaluation
Data analytics experience
Project management experience
Policy and procedure development
Fraud detection techniques
Performance Measurement Techniques
Risk Management
Continuous Improvement Mindset
Operational Audit Management
Regulatory Compliance Knowledge
Internal Audit Administration
External Audit Coordination
Resource Allocation and Utilization
Information Technology Knowledge
Time Management
Problem-solving abilities
Excellent Communication
Team Building and Leadership
Self Motivation
Attention to Detail
Cash Flow analysis
Adaptability
Analytical Thinking
Vulnerability Assessment
Security Awareness Training
Application security and Identity Management
Information Security and Network Security
IT Governance
Business Continuity and Disaster Recovery
Affiliations
- The Institute of Internal Auditors (IIA)
- Information Systems Audit and Control Association (ISACA)
- The Institute of Risk Management South Africa (IRMSA)
- Professional Evaluation and Certification Board (PECB)
References
All references and contact details can be provided on request to ensure compliance with the South African “Protection of Personal Information” Act (POPI) requirements.
Work Availability
monday
tuesday
wednesday
thursday
friday
saturday
sunday
morning
afternoon
evening
swipe to browse
Work Preference
Work Type
Full TimePart TimeContract WorkLocation Preference
On-SiteRemoteHybridImportant To Me
Career advancementWork-life balanceCompany CultureFlexible work hoursPersonal development programsHealthcare benefitsWork from home optionTeam Building / Company RetreatsPaid sick leave401k matchStock Options / Equity / Profit Sharing4-day work weekQuote
Wanderer, there is no path, the path is made by walking.
Antonio Machado
Timeline
Senior Management Pre-entry Programme - Management Science
The National School of Government
08.2024 - Current
Certified Internal Auditor - Internal Auditing
The Institute of Internal Auditors
01.2024 - Current
Advanced Project Management - Project Management
University of The Free State
01.2023 - 11.2023
Certified ISO/IEC 27001 Senior Lead Auditor - Information Security Management Systems
Professional Evaluation And Certification Board
01.2020 - 07.2020
AUDIT AND COMPLIANCE MANAGER
Kapsch TrafficCom-ZA
10.2018 - 03.2021
SENIOR IT LEAD AUDITOR
Mr Price Group Limited
10.2014 - 09.2018
BCom Honours in Internal Auditing - Internal Auditing
University of Pretoria
01.2010 - 12.2010
IT INTERNAL AUDIT SPECIALIST
The Department of Mineral Resources
01.2010 - 09.2014
BCom Internal Auditing - Internal Auditing
University of Pretoria
01.2007 - 12.2009
HEAD OF DEPARTMENT: AUDIT, RISK AND COMPLIANCE
Kapsch TrafficCom-ZA
4 2021 - Current