IT Internal Auditor
IT Internal Auditor
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Roles & Responsibilities :
Position Overview:
The IT Internal Auditor will be responsible for the execution of risk-based internal audit assignments focused on information systems technology infrastructure cybersecurity and digital processes. This role requires a strong understanding of IT general controls (ITGCs) cybersecurity frameworks system development practices and regulatory compliance standards. The IT Internal Auditor will perform fieldwork document findings and assist in reporting results to senior management. The role supports the Internal Audit Manager in delivering the IT audit plan and ensuring effective technology risk mitigation and control enhancement across the organization.
Key Responsibilities:
1. Audit Execution:
Execute IT internal audits in line with the approved audit plan
Perform audits across infrastructure applications data management and cybersecurity functions.
Conduct walkthroughs gather system documentation assess IT processes and evaluate the design and operating effectiveness of IT controls.
Evaluate compliance with company IT policies cybersecurity protocols and applicable regulations such as GDPR DPDP NIST ISO 27001 and COBIT.
Identify weaknesses in IT controls process inefficiencies and opportunities for automation or system optimization.
Perform testing of IT general controls (e.g. access controls change management backup & recovery) and application controls.
Document audit procedures and findings in accordance with internal audit standards.
Ensure audit working papers are complete clear and appropriately support conclusions.
2. Reporting & Communication:
Drafting audit observations and IT risk recommendations
Driving and Monitor remediation progress for audit issues and work with IT and business process owners to ensure timely resolution.
3. Risk & Control Assessment:
Support the annual IT risk assessment by analyzing threat trends technology risks and control gaps.
Contribute to the identification of emerging risks including cloud security third-party risks and cyber threats.
Deliver timely reports on IT control weaknesses system vulnerabilities and non-compliance with frameworks.
Participate in control self-assessment (CSA) reviews and provide inputs into the enterprise risk management process.
4. Stakeholder Engagement:
Liaise with IT information security data privacy and application teams during audits to understand systems and processes.
Communicate audit findings in a constructive risk-based manner to drive timely remediation.
5. Compliance & Regulatory Oversight:
Ensure compliance with regulatory requirements such as SOX GDPR NCA or applicable industry standards for IT controls.
Stay updated on changes to cybersecurity laws data protection guidelines and digital risk requirements.
Apply knowledge of frameworks such as ISO 27001 NIST CSF ITIL and COBIT in evaluating IT control effectiveness.
6. Continuous Improvement:
Identify control improvement opportunities in IT processes system security and technology governance.
Contribute to the enhancement of audit methodologies for IT audits including data analytics and automated testing.
Stay informed on developments in cybersecurity AI risks and cloud governance and apply insights to audits relevant to the software and GCC sectors.
Key Skills and Competencies:
Strong understanding of IT audit methodologies ITGCs and cybersecurity best practices.
Familiarity with key frameworks such as COBIT NIST ISO 27001 and ITIL.
Knowledge of ERP systems databases cloud environments (e.g. AWS Azure) and enterprise applications.
Analytical mindset with the ability to evaluate system configurations identify vulnerabilities and assess control design.
Excellent communication skills to translate technical findings into actionable business insights.
Proficiency in Microsoft Office Suite; familiarity with GRC platforms audit management tools and security monitoring software is an advantage.
Ability to manage multiple assignments and meet deadlines in a dynamic environment.
Qualifications :
Educational qualification:
Qualifications:
Bachelors degree in accounting Finance Business Information Systems Computer Science Cybersecurity or a related field. or a related field.
CA/CIA/CPA/ICAEW or equivalent certification is preferred.
CISA CIA CISSP or other relevant certifications preferred
7-10 years of experience in IT auditing cybersecurity risk management or related technology roles.
Hands-on experience with evaluating ITGCs access controls change management and cybersecurity controls.
Familiarity with systems such as SAP Microsoft 365 cloud platforms and modern digital tools is required
Remote Work :
No
Employment Type :
Full-time
Employment Type
Full-time
