IT Auditor
Trustfund Pensions Limited a leading Pension Fund Administrator (PFA) in Nigeria needs a young IT Auditor. The IT Auditor is responsible for evaluating the effectiveness, adequacy, and efficiency of the organization’s IT controls, systems, and processes. The role ensures that technology-related risks within the Pension Fund Administrator (PFA) are properly identified, assessed, and mitigated in line with regulatory requirements (including National Pension Commission guidelines), industry standards, and the organization’s internal control framework.
JOB TITLE: IT Auditor
LOCATION: Abuja
REQUIREMENTS;
- Bachelor’s degree in computer science, Information Systems, Engineering, or related field.
- 1–3 years’ experience in IT audit, information security, or system assurance—preferably within financial services or a PFA.
- Professional certifications are an advantage: CISA, CRISC, CISM, CEH, ISO 27001 LA/LI.
- Strong understanding of ITGC, cybersecurity principles, database controls, and cloud environments.
- Good knowledge of PenCom regulations, NDPR, financial sector standards, and internal control frameworks.
DUTIES/RESPONSIBILITIES:
IT Governance & Risk Assessment
- Assess the adequacy of IT governance structures and alignment with PFA strategic objectives.
- Identify key IT risks and evaluate associated controls across applications, infrastructure, cybersecurity, and data management.
- Conduct periodic IT risk assessments and recommend mitigation measures.
Application & Systems Audit
- Review core pension administration systems (e.g., contributions processing, RSA management, benefits administration).
- Assess controls around system configuration, logical access, change management, and data integrity.
- Validate automated controls and ensure system processes comply with PenCom regulations and internal policies.
IT General Controls (ITGC) Review
Evaluate IT general controls across:
- Access Control (user access, password policies, privileged access).
- Change Management (system updates, patches, migration controls).
- Backup & Recovery (DR sites, redundancy, data availability).
- Operations Management (job scheduling, incident management).
- Assess third-party service providers and outsourced technology functions.
Cybersecurity & Data Protection Compliance
- Review network security controls, endpoint protection, firewall rules, and vulnerability management.
- Assess adherence to NDPR/NDPC data privacy requirements.
- Evaluate the PFA’s cybersecurity framework for resilience against threats.
Business Continuity & Disaster Recovery
- Review of the adequacy of Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP).
- Participate in DR drills and assess gaps in recovery processes.
Audit Execution & Reporting
- Develop IT audit programs and execute audits in line with the annual audit plan.
- Document audit findings, root causes, and risk implications.
- Prepare and present clear audit reports with actionable recommendations.
- Monitor remediation of IT audit issues and track compliance.
Collaboration & Advisory
- Provide advisory support on new systems implementation, upgrades, and technology-driven projects.
- Work with Internal Control, Risk Management, ICT, and Compliance teams to strengthen the control environment.
METHOD OF APPLICATION:
Qualified and interested candidates should send their Applications and Curriculum Vitae to careers@trustfundpensions.com
APPLICATION CLOSING DATE
10th January 2026
Note: Only short-listed applicants will be contacted.