This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The IT Internal Auditor will be responsible for the execution of risk-based internal audit assignments focused on information systems, technology infrastructure, cybersecurity, and digital processes. This role requires a strong understanding of IT general controls (ITGCs), cybersecurity frameworks, system development practices, and regulatory compliance standards. The IT Internal Auditor will perform fieldwork, document findings, and assist in reporting results to senior management. The role supports the Internal Audit Manager in delivering the IT audit plan and ensuring effective technology risk mitigation and control enhancement across the organization.
Job Responsibility:
Execute IT internal audits in line with the approved audit plan
Perform audits across infrastructure, applications, data management, and cybersecurity functions
Conduct walkthroughs, gather system documentation, assess IT processes, and evaluate the design and operating effectiveness of IT controls
Evaluate compliance with company IT policies, cybersecurity protocols, and applicable regulations such as GDPR, DPDP, NIST, ISO 27001, and COBIT
Identify weaknesses in IT controls, process inefficiencies, and opportunities for automation or system optimization
Perform testing of IT general controls (e.g., access controls, change management, backup & recovery) and application controls
Document audit procedures and findings in accordance with internal audit standards
Ensure audit working papers are complete, clear, and appropriately support conclusions
Drafting audit observations and IT risk recommendations
Driving and Monitor remediation progress for audit issues and work with IT and business process owners to ensure timely resolution
Support the annual IT risk assessment by analyzing threat trends, technology risks, and control gaps
Contribute to the identification of emerging risks including cloud security, third-party risks, and cyber threats
Deliver timely reports on IT control weaknesses, system vulnerabilities, and non-compliance with frameworks
Participate in control self-assessment (CSA) reviews and provide inputs into the enterprise risk management process
Liaise with IT, information security, data privacy, and application teams during audits to understand systems and processes
Communicate audit findings in a constructive, risk-based manner to drive timely remediation
Ensure compliance with regulatory requirements such as SOX, GDPR, NCA, or applicable industry standards for IT controls
Stay updated on changes to cybersecurity laws, data protection guidelines, and digital risk requirements
Apply knowledge of frameworks such as ISO 27001, NIST CSF, ITIL, and COBIT in evaluating IT control effectiveness
Identify control improvement opportunities in IT processes, system security, and technology governance
Contribute to the enhancement of audit methodologies for IT audits, including data analytics and automated testing
Stay informed on developments in cybersecurity, AI risks, and cloud governance, and apply insights to audits relevant to the software and GCC sectors
Requirements:
Bachelor’s degree in accounting, Finance, Business, Information Systems, Computer Science, Cybersecurity, or a related field
CA/CIA/CPA/ICAEW or equivalent certification is preferred
CISA, CIA, CISSP, or other relevant certifications preferred
7-10 years of experience in IT auditing, cybersecurity, risk management, or related technology roles
Hands-on experience with evaluating ITGCs, access controls, change management, and cybersecurity controls
Familiarity with systems such as SAP, Microsoft 365, cloud platforms, and modern digital tools is required
Strong understanding of IT audit methodologies, ITGCs, and cybersecurity best practices
Familiarity with key frameworks such as COBIT, NIST, ISO 27001, and ITIL
Knowledge of ERP systems, databases, cloud environments (e.g., AWS, Azure), and enterprise applications
Analytical mindset with the ability to evaluate system configurations, identify vulnerabilities, and assess control design
Excellent communication skills to translate technical findings into actionable business insights
Proficiency in Microsoft Office Suite
familiarity with GRC platforms, audit management tools, and security monitoring software is an advantage
Ability to manage multiple assignments and meet deadlines in a dynamic environment