Manager - Technology Audit

About the Role
the company is currently seeking a Manager - Internal Audit, Information Technology, reporting to the Associate Director - Technology Audit. You will be responsible for providing independent and objective assurance, advisory services, and making recommendations on the effectiveness of the Group’s corporate governance, risk management, and internal controls, including security controls, thereby minimizing the risk of security breaches and protecting sensitive information. You will carry out activities in accordance with the Group-wide Audit Manual and International Standards for the Professional Practice of Internal Audit.

Key Accountabilities

• Manage the implementation of the three-year and annual audit plan through the audit of the relevant business units, functions, and processes according to the annual audit plan, ensuring that all corporate risks and deviations are identified.
• Collaborate closely with process owners and management to develop and follow up on suitable preventive/corrective action plans in response to audit irregularities or areas of non-compliance identified, enabling efficient turnaround and risk mitigation.
• Assess the effectiveness of internal controls related to IT systems, examining the security measures in place for both traditional IT systems and cloud-based environments, and recommend improvements as necessary.
• Review the design and implementation of information systems, evaluate their security features, and ensure they meet business requirements.
• Steer internal audit activities, including the audit of areas such as IT Infrastructure, application general controls, database management, cloud environment, and information security operations, as well as Enterprise Architecture (EA), data management, highlighting non-conformances, and facilitating their prompt mitigation.
• Oversee and quality assure the development of audit reports to ensure they contain comprehensive and accurate observations and findings, providing value-adding recommendations to the functional areas.
• Identify continuous improvement initiatives to provide an effective and professional audit service to meet the needs of the quarterly Executive Summary to senior management.
• Monitor the implementation of corrective actions identified against any audit irregularities or areas of non-compliance, ensuring they are corrected on time and keep the line manager informed of any discrepancies or delays.
• Analyze the different risks of using emerging technologies (AI, Blockchain, IoT) in organizational processes and procedures, producing RACI matrices.
• Perform technical reviews including cyber, website, mobile apps, RPA, along with code review processes.
• Ensure that cyber and physical assets are safeguarded by assessing controls implemented for robust functionality in organization-owned systems and products.
• Stay abreast of emerging technologies, threats, and security best practices.

Who We Are Looking For

• 8 to 12 years of relevant internal and/or external audit experience.
• Strong understanding of governance models, audit, and audit reporting best practices in the respective industry domain.
• Strong understanding of risk assessment and treatment.
• Strong understanding of IT systems, cloud computing, and cybersecurity principles.
• Experience in conducting security audits and risk assessments.
• Knowledge of relevant regulations and compliance frameworks such as UAE Personal Data Protection Law and GDPR.
• Capability to conduct regular security audits to evaluate the effectiveness of existing security measures and recommending improvements.
• Familiarity with continuous auditing using system-generated evidence and maturity scoring.
• Strong interpersonal skills and the ability to connect with people at all levels to drive successful relationships.
• Good understanding of Information Security incident management, security event logging and monitoring, and best practices for secure network architecture.
• Strong understanding of Vulnerability Assessment and Penetration Testing process and assessment of control implementation status.
• Excellent English written and verbal communication skills, computer literate.
• Strong understanding and hands-on experience in Audit Management software and data analytics tools.
• Knowledge of project management methodologies, including Agile methodologies.
• Familiar with statistical analysis, predictive analysis, and forecasting data models.
• Experience creating reports and presentations for senior executives.
• Familiarity with ways of procuring evidence for auditing purposes.
• Familiar with Git branching and repository management.
• Familiar with software development lifecycle (SDLC) modules and sub-modules.
• Familiar with data analytics tools like Power BI/Tableau, able to move from sampling to population testing.

Education / Professional Certifications

• Bachelor’s degree in information technology, cybersecurity, or a related field.
• Professional certifications such as CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), or equivalent.

Technical Competencies

• Internal audit methodology and IA reporting technology.
• Risk management and forensics.
• Secure network architecture and security testing.
• Data analysis and technical writing.
• Adequate knowledge of legal requirements within the UAE, international internal audit standards, and requirements.
• Excellent service delivery and process management skills.
• Excellent analytical capabilities.
• Hands-on experience in information security operations and cloud administration is a plus.