ICT auditor performs audits of information systems, platforms, and operating procedures in accordance with established standards for efficiency, accuracy and security. He/she evaluates ICT infrastructure in terms of risks to the organisation and establishes controls to mitigate loss. He/she determines and recommends improvements in the current risk management controls and implementation of system changes or upgrades.