Jan Adrian Vos (Cia, Cisa, Crisc, Acda) Email & Phone Number

Pretoria

1. Implement Combined Assurance (CA) in the organisation, this includes:- Framework- Methodology- Guidance documents- CA planning (individual and consolidation)- CA Reporting2. Thought Leadership

Pretoria

Duties:• Risk Base audit planning,• Annual audit planning (three-year cycle),• Risk identification & assessment,• Performing Compliance & Assurance audits and Audit Consultation per request,• Plan assignments,• Manage budgets of assignments,• Manage resources,• Ensure productivity,• Performance management,• Ensure quality of work in alignment of Standards and Frameworks (IIA, ISACA, COSO, COBIT, ITIL, ISO 9000 -27001 -27032 -31000 etc.),• Provide training where work/quality is not satisfactory,• Appointment of people,• Manage relationships with auditees, and• Managing stand-alone and integrated audits. Management of:- Application Control Reviews (ACR) - Security audit reviews - Information Technology General Control Reviews (ITGC) - Pre-implementation reviews - Post-implementation reviews - Project governance reviews

Duties:• Risk Base audit planning,• Annual audit planning (three-year cycle),• Risk identification & assessment,• Performing Compliance & Assurance audits and Audit Consultation per request,• Plan assignments,• Manage budgets of assignments,• Manage resources,• Ensure productivity,• Performance management,• Ensure quality of work in alignment of Standards and Frameworks (IIA, ISACA, COSO, COBIT, ITIL, ISO 9000 -27001 -27032 -31000 etc.),• Provide training where work/quality is not satisfactory,• Appointment of people,• Manage relationships with auditees, and• Managing various audit assignments and liaisons with other audit units in the performance of stand-alone and integrated audits. Manage Application Control Reviews (ACR) to assess the controls configured and implemented within the system/application and recommend to business possible enhancements which would help them reach their objectives. Management of security audit reviews to assess whether Information and Cyber Security risks are mitigated through the implementation of adequately designed controls that are functioning effectively.Manage Information Technology General Control Reviews (ITGC) to assess whether management of IT Operations is effective to mitigate risks and achieve business objectives.Mange pre-implementation reviews to assess whether system development is based on approved business specifications (BRS/FRS) and tested and signed off before implementation.Mange post-implementation reviews to assess whether the implemented system operates as envisage in the business requirements and to determine how effective the project was managed.Manage project governance reviews to assess the level of governance and compliance to methodologies and best practice during software developments, this might be based on traditional or agile project management methodologies.

Managing various audit assignments and liaisons with other audit units in the performance of stand-alone and integrated audits.Identified all risks that impact the business cluster under review, from the risks identified the key risks are highlighted to determine the audit scope. Audit will liaise with the relevant Risk Managers to determine the correctness and completeness of their risk assessment by comparing it with the business risk register.In the performance of an Application Control Review (ACR) audit the aim is to ensure the accuracy, completeness, validity, timeliness, segregation of duties of data input, processing, output, master file maintenance and access to the system. An ACR audit focuses on the adequacy and effectiveness of key automated system controls that mitigates risks to the business.

Sandton Johannesburg

Managing various audit assignments and liaisons with other audit units in the performance of stand-alone and integrated audits.Identified all risks that impact the business cluster under review, from the risks identified the key risks are highlighted to determine the audit scope. Liaise with relevant Risk Managers to determine the correctness and completeness of their risk assessment by comparing it with the business risk register.In the performance of Application Control Review (ACR) audits the aim is to ensure accuracy, completeness, validity, timeliness, and segregation of duties of functions on the system. To test the controls build into the application/system to ensure quality and accurate data input, processing, output, master file maintenance and access to the system. An ACR audit focuses on the adequacy and effectiveness of key automated system controls that mitigates risks to business.Performing Data analysis for the Financial Auditing teams by testing and reporting on any inconsistencies detected through the use of Computer Audit Assisted Techniques (CAATs) eg:• Duplicate payments/invoices, • Missing transactions/sequence tests,• Unauthorised use of suppliers,• Recalculation of payments/ interest,• Split payments,• Reconciliations between systems, and• Perform data accuracy, completeness and validation tests on application data to determine the compliance with set business rules and compliance requirements.

Pretoria

Responsibilities• Managing junior team members in various audit assignments,• Execution of Systems, Applications and Products (SAP) R/3 Audits,• Conducting feasibility studies on the usability of available client data,• Conversion of client data into ACL usable format, writing of scripts and performing audit tests.• Performing audits on conversions and reconciliations between systems,• Supporting Financial Audit in the application of CAATs,• General support to Financial Audit auditors with accounting systems,• Performing general control audits,• Evaluating systems to determine input and output standards (using the basic principals of an application audit) to test for controls such as completeness checks, validity checks, reasonableness checks, sequence checks and logical relationship checks in an application, and• Performing a Value for Money audit.Performing Data analysis for the Financial Auditing teams by testing and reporting on any inconsistencies detected through the use of Computer Audit Assisted Techniques (CAATs) eg:• Duplicate payments/invoices, • Missing transactions/sequence tests,• Unauthorised use of suppliers,• Recalculation of payments/ interest,• Split payments,• Reconciliations between systems, and• Perform data accuracy, completeness and validation tests on application data to determine the compliance with set business rules and compliance requirements.

Newcastle, South Africa

Responsibilities • Capturing of client data from source documents to the Cashbook and other books of entry, the links to the Trail Balance and the drafting of the financial statements (Sole proprietors, Close Corporations, Trusts and Companies).• Testing of transactions in the execution of financial audits.I assisted clients with:• Tax issues (VAT, PAYE, UIF, Income tax),• Financial analysis,• Stock counts and reconciliations,• Management Information to perform the day to day operation of their businesses, and• Implement controls to counter fraud and to save them money.During the conducting of financial audits the following areas were evaluated:• Drafting of the annual financial statements,• Planning of the audit,• Sales and debtors cycle,• Purchases and creditors cycle,• Non - current liabilities,• Fixed assets,• Bank and cash, and• Income statement.

Crisc - Certified In Risk And Information Systems Control, It Risk And Control Management.

CRISC

Cia - Certified Internal Auditor

CIA

Acda - Acl Certified Data Analyst, Data Analytics And Scripting/Automation Of Tests.

ACDA

Cisa - Certified Information Systems Auditor, Information Technology Audit

CISA

Bcompt, Accounting And Auditing

Three year degree. Included subjects such as: Audit, Accounting, Cost Accounting, Tax, Commercial law, Economics, etc.

National Diploma: Internal Audit, Internal Audit And Accounting

Three year course with majors in Internal Audit and Accounting.