Senior Auditor, IT (Digital Systems & Solutions)

In this role, you will perform assigned audit engagements from start to finish, including pre-planning and wrap-up activities. You will ensure the application of risk and control concepts to various scenarios and identify potential issues during the auditing process. Additionally, you will assist in periodic Risk Assessments and contribute to the development of Risk-Based Work Plans that focus on IT risks.

Your specific accountabilities include:

• Initiating and promoting the establishment and continuous improvement of the Corporate Governance Framework, which encompasses Enterprise Risk Management, Corporate Code of Conduct, Ethics, and Values.
• Leading IT auditors in examining and analyzing records, while executing audit program steps for assigned audits.
• Developing a detailed audit program and Risk & Control Matrix (RCM) for each audit, which includes objectives, potential risks, key controls, audit procedures, and appropriate use of audit techniques and tools to evaluate governance, risks, and control processes.
• Ensuring that adequate working papers and all relevant information are continuously documented and updated in an automated Audit Management System according to predefined templates and audit procedures.
• Preparing audit reports that conclude with professional opinions on the adequacy and effectiveness of risk management, control systems, and the overall efficiency of conducted activities.

The minimum qualification for this position is a Bachelor's Degree in Computer Science, related IT discipline, Finance, Auditing, or an equivalent field. You should have at least 8 years of relevant experience in IT internal auditing, particularly within oil and gas operations, understanding the associated challenges and risks in a corporate context. An in-depth knowledge of frameworks and standards such as the International Professional Practices Framework for IT Assurance/IT Assurance Framework (ITAF), COBIT, ITIL, ISO27000, and NIST is required. Expertise in data analytics for collecting and analyzing complex data, evaluating information and systems, and drawing logical conclusions is essential.

A mandatory requirement is an IT audit certification such as CISA, while additional certifications like CISSP, CISM, or GIAC are preferred. The physical effort required for this job is minimal, with a typical work environment being an air-conditioned office. However, exposure to prevailing weather conditions is expected during field visits to operating sites.