Siphiwo Mabho
Information Systems Auditor (CISA)
Cape Town,WC
Summary
Certified Information Systems Auditor (CISA) professional delivering Information Systems Reviews, which includes IT Governance audits, Project Management, IT General Controls and Application Controls. Perform workpaper quality checks, and client discussions of findings raised across assurance and follow-up engagements. Provides audit planning input on Information Systems Reviews, reviews assistant auditors output and compile audit reports on projects that I lead. Working knowledge of BarnOwl and ACL auditing softwares into audits that require sound judgment and structured reporting.
Overview
1
1
Language
11
11
years of professional experience
Work History
IT Auditor
City of Cape Town
12.2024 - Current
- Provide input into the development of IT annual audit plan.
- Lead some of the Information System Reviews (assurance and follow-up) and review work performed by assistant auditors.
- Lead comprehensive audits of IT systems to ensure compliance with developed policies and procedures and operating effectively.
- Perform other engagement types such as IT Governance Reviews, Project Management, advisories and control-self assessments in compliance with Internal Audit Methodology and Global Internal Audit Standards (GIAS).
- Develop risk assessments to identify potential vulnerabilities.
- Evaluate internal controls and processes, streamlining workflows for increased efficiency and risk mitigation.
- Facilitated meetings with audit clients, including entrance meetings, risk assessment workshops, and findings discussions to enhance communication and understanding.
- Compiled detailed audit reports to guide management in implementing control measures based on assigned reviews.
- Advise audit clients on best practices such as COBIT, King Code, COSO Framework, NIST and CIS.
- Provide system support to Internal Audit department’s audit software (BarnOwl).
IT Assistant Auditor
City of Cape Town
02.2019 - 11.2024
- Assisted IT Cluster Team annually by providing input for development of audit plan.
- Perform Information Systems Reviews such as IT General Controls, Application Controls, Project Management and Data Analytics Reviews, see list of reviews completed in the past:
- Document system descriptions and risk assessments and audit programs of the activities under review.
- Prepared detailed Notification and Engagement Letters for projects.
- Throughout all the engagements performed, I have developed and documented clear and concise audit working papers by assessing whether controls in place are adequate, effective and efficient.
- Prepared detailed factual findings with valid root causes and practical recommendations supported by relevant criteria.
- Advise audit clients on best practices such as COBIT, King IV, NIST and CIS.
- Supported Internal Audit department in procurement and implementation of auditing software (BarnOwl), including ongoing staff support.
- Ability to lead a team as acting team lead I had to review the working paper of the two resources assigned to the review to ensure that accurate and complete information was assessed and reported on.
Junior Internal Auditor
PetroSA, Parow Head Office
06.2017 - 01.2019
- Developed risk and control matrix, identifying key audit findings.
- Developed and tested audit procedures, documenting and escalating noted issues.
- Communicate audit results to audit clients.
- Assess adequacy and effectiveness of controls and risk management processes.
- Assisted auditors in conducting financial, compliance, business process, and predetermined objectives audits.
Internal Audit Intern
PetroSA, Parow Head Office
06.2015 - 05.2017
- Draft audit objectives to evaluate the adequacy and effectiveness of controls
- Engaged with clients to gather feedback on audit findings, enhancing communication and clarity.
- Followed up on management's resolutions of audit findings, ensuring accountability and progress.
- Follow up on findings indicated as resolved by management.
Education
Certified Information Systems Auditor -
ISACA (Information Systems Audit And Control Association)
Offered Online 04.2001 -
BTech: Internal Auditing -
Cape Peninsula University of Technology
Cape Town12-2014
National Senior Certificate - undefined
Langa Senior Secondary School
Flagstaff12-2010
Skills
IT audit planning
Information systems reviews
Audit working papers
Audit reporting
Client meeting facilitation
IT general controls
Application controls
Business processes key controls mapping (including system description)
Risk assessment workshops
Control testing
Audit software support
Personal Information
- Nationality: South African
- Driving License: Code A & B
- Marital Status: Single
Timeline
IT Auditor
City of Cape Town
12.2024 - Current
IT Assistant Auditor
City of Cape Town
02.2019 - 11.2024
Junior Internal Auditor
PetroSA, Parow Head Office
06.2017 - 01.2019
Internal Audit Intern
PetroSA, Parow Head Office
06.2015 - 05.2017
Certified Information Systems Auditor -
ISACA (Information Systems Audit And Control Association)
04.2001 -
National Senior Certificate - undefined
Langa Senior Secondary School
BTech: Internal Auditing -
Cape Peninsula University of Technology