NATIONAL LOTTERIES COMMISSION (NLC) VACANCIES

​INTERNAL AUDIT & ADVISORY DIVISION 
 
IT AUDITOR 
 
MAIN PURPOSE OF THE JOB 
Reporting to the IT Audit Specialist the incumbent will be responsible for undertaking audit engagements to assess the adequacy and effectiveness of financial and operational controls within the NLC to ensure that it is in accordance with corporate governance, ISACA guidelines, Global Internal Audit Standards, the PFMA as well as other applicable laws and regulations and to inform the relevant stakeholders on the state of the control environment. 
SALARY SCALE: Commensurate with qualifications and experience. 
 
REQUIRED QUALIFICATIONS 

• B-Degree in Auditing/ Accounting/ IT/ Computer Science/ or Information Systems or Equivalent 
• ISACA certifications: CISA, CISM, CGEIT, CRISC, CCAK, will be an added advantage. 

 
REQUIRED WORK EXPERIENCE: 

• 3 to 5 years relevant work experience in General controls Review, Application controls Review and IT Security Reviews 

 
KEY RESPONSIBILITIES: 

• Perform audits of assigned functions including financial, operational and information technology audits. 
• Maintain the audit file and safeguard the Internal Audit documentation. 
• Maintain a database of prior audit recommendations and co-ordinate the follow-up to validate (quarterly basis) resolutions of the findings. 
• Make oral presentations of audit findings to management and where required, executive management. 
• Regularly monitor the NLC systems and procedures to ensure compliance. 
• Assist the IT Audit Specialist with the preparation of reports to be distributed and presented to EXCO, NLC Board, Audit Committee and the Commissioner. 
• Identify key IT risks and control areas that requires audit attention. 
• Conducts audits in line with the Internal Audit Methodology and Global Internal Audit Standards. 
• Assist to plan, schedule and implement IT auditing activities in line with business processes and frameworks. 
• Recommend measures to address gaps identified in IT audit process. 
• Perform Critical Task Analysis and advise management to update their risk registers with identified emerging IT risks. 
• Monitor IT Audit risks for emerging risks that could be escalated to top organizational risks. 
• Collects and evaluate information from other sources e.g. operational plans, audit reports etc. for relevancy. 
• Prepare detailed audit reports that clearly articulate findings, conclusions and recommendations. 
• Implement the use of appropriate technology for IT audits 
• Conduct low level research and advice on the most appropriate IT audit technology. 
• Gather IT audit-related data from internal or external resources. 
• Ensure that proper record keeping is retained and updated regularly. 
• Assist in producing reports or presentations that outline findings, explain IT Audit positions, or recommend changes. 
• Assist in compiling monthly reports to Exco and quarterly reports to oversight structures.
• Compile regular and accurate feedback information to stakeholders regarding audit related issues. 
• Build and maintain effective internal stakeholder relationships for the purpose of expectations management, knowledge sharing and integration, and to manage the organisation’s reputation. 
• Represent and participate in the unit in committees and tasks teams when required. 
• Collate efficient communication to auditors, role players and team members. 
• Assist to resolve queries and problems within span of control and within agreed time frames. 
• Liaise with relevant stakeholders regarding follow-up of information, as required. 
• Interact with colleagues and provide credible advice to the NLC employees when required as it relates to performance audit services. 

 
REQUIRED COMPETENCIES AND SKILLS 

• Relevant legislation, regulatory frameworks & Best practices 
• Auditing Standards, Methodology & Principles 
• IT Systems, Processes & Networks 
• Risk Assessment & Management practices and principles 
• IT Governance and Controls 
• Specialised Auditing (IT & forensic) 
• Audit Governance & Controls 
• Data Analytics & Auditing Tools 
• Business Acumen 
• Financial Management, SCM & practices 
• National Treasury Directives, Notes and processes 
• Companies Act & Regulations 
• Tax and accounting practices and principles 
• Ethics & Integrity Management Principles 
• Monitoring, Evaluation & Reporting Principles 

 
 
Note: Background verification, social media checks and security vetting will form part of the selection process and successful candidates will be subjected to security vetting. Correspondence will be limited to shortlisted candidates only. If you have not been contacted within three (3) months of the closing date of this advertisement, please accept that your application was unsuccessful. The NLC reserves the right not to fill any advertised position(s). 
 
IMPORTANT NOTICE: APPLICATION INSTRUCTIONS: 

• Please clearly indicate the name of the position you are applying for in the subject line; 
• Only candidates who meet the requirements should apply; 
• Correspondence will be entered into with shortlisted candidates only; 
• CV`s from Recruitment Agencies will not be considered. 
• Applications received after the closing date will not be considered. 
• Submit a comprehensive C.V with qualifications attached to the following email address:Recruitment@nlcsa.org.za

 
CLOSING DATE: 27 OCTOBER 2025 
 
NLC WELCOMES APPLICANTS WITH DISABILITIES 
 
DISCLAIMER- POPIA 
By applying for NLC’s vacancy, you expressly give NLC consent to process your personal information stored in our history of all who have applied will be processed in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”), the NLC Human Capital Policy/Procedures, the NLC’s POPIA Policy and the NLC’s Privacy Policy. These documents set out why the NLC needs the personal information, what NLC will do with it, and with whom the NLC will share it. Note that we will not further process the personal information stored automatically in this portal.





​

​INTERNAL AUDIT & ADVISORY DIVISION 
 
DATA ANALYST SPECIALIST 
 
MAIN PURPOSE OF THE JOB 
Reporting to the Head: IT Audit and Advisory Service, the incumbent will be responsible for analysing data to ensure efficiency during audit assignments, assessing the effectiveness of automated controls, and executing Continuous Auditing strategic initiatives. The role further encompasses forensic and cyber forensic data analysis of large and complex datasets to detect anomalies, fraud indicators, and potential risks, in line with the Global Internal Audit Standards. The position plays a pivotal role in improving the NLC control environment and informing stakeholders on the state of governance, risk, and internal controls. 
 
SALARY SCALE 
Commensurate with qualifications and experience. 
 
REQUIRED QUALIFICATIONS 

• A bachelor’s degree in Internal Auditing, Accounting, Information Technology, Computer Science, Information Systems, Statistics, or Mathematics (or equivalent). 
• A Scripting Certificate (essential). 
• Professional certification with ISACA (e.g., CISA, CISM, CRISC, CGEIT, CCAK) will be an added advantage. 
• Registration with ISACA preferred. 

 
EXPERIENCE

• Minimum of 5 years’ relevant work experience, of which at least 2 years must be at a supervisory level. 
• Proven experience in ACL Robotics (essential). 
• Experience in Python or SQL scripting (advantageous). 
• Demonstrated ability to operate in high-paced environments with effective prioritisation and multitasking. 
• Experience in cross-functional or multidisciplinary collaboration, particularly in audit, IT, or forensic environments. 
• Track record of applying forensic and/or cyber forensic analytics to detect fraud, corruption, or cyber risks will be an advantage. 
• Valid driver’s licence with at least one year of driving experience. 

 
KEY RESPONSIBILITIES 
Technical Duties 

• Provide input into the development of the Annual Risk-Based Internal Audit Plan. 
• Develop and maintain continuous auditing priorities in line with the approved strategy.
• Develop and update Data Flow Maps for all key business processes. 
• Implement IT Audit Data Analytics policies, frameworks, methodologies, and strategies aligned to legislation, global standards, and best practice. 
• Develop and execute audit programmes incorporating data analytics and forensic procedures. 
• Extract, process, and analyse large structured and unstructured datasets (e.g., financial transactions, SCM, HR, grants, system logs) to identify control weaknesses, anomalies, and fraud indicators. 
• Conduct forensic and cyber forensic analyses of digital data and system trails. 
• Apply root-cause and cost analysis to determine underlying control failures and recommend remedial actions. 
• Build predictive and statistical models to evaluate trends, emerging risks, and fraud patterns. 
• Provide data analytics support to forensic investigations and audit engagements. 
• Prepare technical reports and visual analytics dashboards for management and oversight structures (EXCO, Audit & Risk Committee). 

 
Managerial Duties 

• Lead and mentor the Data Analytics team to deliver on strategic and operational objectives. 
• Coordinate with Internal Audit, IT Audit, and Forensic units to ensure alignment of analytics initiatives. 
• Build and maintain stakeholder relationships to manage expectations, share knowledge, and enhance organisational credibility. 
• Promote innovation through automation, continuous auditing, and data-driven decision-making. 
• Ensure quality assurance and compliance with the Global Internal Audit Standards and applicable data governance laws (e.g., POPIA). 
• Report progress and insights to senior management and governance committees on a quarterly basis. 

 
REQUIRED COMPETENCIES & SKILLS 

• Comprehensive knowledge of relevant legislation, regulatory frameworks, and standards, including the PFMA, Treasury Regulations, Companies Act, King IV Report on Corporate Governance, ISO, and COBIT. 
• In-depth understanding of Auditing Standards, methodologies, and principles (aligned to Global Internal Audit Standards). 
• Expertise in identifying fraud risk indicators and applying forensic data mining and analytics techniques. 
• Sound knowledge of IT governance, IT audit controls, and information security principles. 
• Proficiency in data analytics and visualisation tools, including ACL Robotics, SQL, Python, R, and Power BI, with strong modelling and statistical analysis capability. 
• Familiarity with cyber forensic analysis techniques 
• Demonstrated business acumen, critical thinking, and problem-solving ability. 
• Upholds high ethical standards, professional integrity, and exceptional attention to detail. 
• Excellent communication, report writing, and presentation skills, with the ability to translate complex data insights into actionable recommendations. 

 
 
Note: Background verification, social media checks, credit checks and security vetting will form part of the selection process and successful candidates will be subjected to security vetting. Correspondence will be limited to shortlisted candidates only. If you have not been contacted within three (3) months of the closing date of this advertisement, please accept that your application was unsuccessful. The NLC reserves the right not to fill any advertised position(s). 
 
IMPORTANT NOTICE: APPLICATION INSTRUCTIONS: 

• Please clearly indicate the name of the position you are applying for in the subject line; 
• Only candidates who meet the requirements should apply; 
• Correspondence will be entered into with shortlisted candidates only; 
• CV`s from Recruitment Agencies will not be considered. 
• Applications received after the closing date will not be considered. 
• Submit a comprehensive C.V with qualifications attached to the following email address: Recruitment@nlcsa.org.za

 
CLOSING DATE: 27 OCTOBER 2025 
 
NLC WELCOMES APPLICANTS WITH DISABILITIES 
 
DISCLAIMER- POPIA 
By applying for NLC’s vacancy, you expressly give NLC consent to process your personal information stored in our history of all who have applied will be processed in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”), the NLC Human Capital Policy/Procedures, the NLC’s POPIA Policy and the NLC’s Privacy Policy. These documents set out why the NLC needs the personal information, what NLC will do with it, and with whom the NLC will share it. Note that we will not further process the personal information stored automatically in this portal.