Senior Auditor, IT (Digital Systems & Solutions)

About the Role

Perform assigned audit engagements within the domain of Digital Systems & Solutions (DS&S) from start to finish. This includes preplanning and wrap-up activities, ensuring the application of risk and control concepts to scenarios encountered, and identifying potential issues within the company and Group Companies. Contribute as a Subject Matter Expert (SME) in periodic Risk Assessments and the development of Risk-Based Work Plans focusing on Digital Systems & Solutions risks within the company and its Group Companies.

Key Accountabilities

Job Specific Accountabilities

Internal Audit Plan

• Develop the audit universe to ensure coverage of DS&S risks in alignment with other D&T risk areas (such as Digital governance, process, infrastructure, information systems/security, interfaces/connectors, and emerging technologies) affecting the company Business operations.
• Review and update the D&T audit universe, especially for Digital Systems & Solutions.
• Develop and implement strategic initiatives of the One ERP Assurance Plan and other Business Applications / Business Solutions Plans while supporting strategic initiatives (such as Infrastructure, OT, and Process enhancements) that impact group-wide audit plans.
• Coordinate with Audit Group Companies (AGCs) to verify the adequacy of coverage of the DS&S universe and risks, ensuring incorporation of Group Assurance objectives in AGCs audit plans.
• Provide relevant business and technology insights into current, emerging, and potential technology issues, trends, and opportunities affecting AGCs and Business Lines Divisions (BLDs).

Audit Execution

• Conduct audits, advisory engagements, and other influencing activities in technical areas of current and emerging technologies within the company and its Group Companies.
• Develop detailed audit programs/Risk & Control Matrices (RCM) including objectives, potential risks, key controls, and audit procedures; submit for management review and approval.
• Determine auditing procedures, including Information Systems Audit Techniques and data analytics.
• Ensure adequate documentation and updating of working papers and relevant information in the automated Audit Management System.
• Analyze and appraise related systems and evidentiary data/information.
• Evaluate corrective actions taken by management on audit recommendations through follow-up audits.
• Ensure approved audit objectives are met with adequate coverage of relevant areas and sufficient audit evidence to support conclusions and recommendations.
• Adapt the audit approach to the changing technology landscape and deliver critical technology audits impacting group-wide internal controls.
• Supervise audits in accordance with the approved RCM and professional standards, ensuring quality standards and processes are upheld, including supervision of external or junior staff.
• Establish a Centre of Excellence for critical technology areas, providing ongoing support within HQ and Group Companies during audit execution.
• Offer centralized audit and advisory services on internal controls to the company’s small-scale group companies.

Audit Reports

• Prepare audit reports with conclusions, professional opinions on risk management and control systems, and recommend improvements to rectify reported deficiencies.
• Follow up on audit report responses and adequacy of corrective actions taken on recommendations.
• Assist in periodic reporting to the Audit Committee and Senior Management concerning internal audit activities and significant risk exposures.
• Perform quality assurance activities on digital and technology components throughout the audit cycle.

Coordination

• Assist the Secretary of the Audit Committee in arranging meetings, preparing agendas and minutes, and reporting on Corporate Governance Framework issues.
• Conduct workshops or presentations promoting awareness of the Internal Audit function.
• Provide professional advice on Group Companies’ Audit Committee Charter, Internal Audit Charter, and Technology Audit Methodology/Procedures.
• Conduct research and benchmarking to resolve audit issues and identify gaps.
• Drive continuous improvement over audit delivery and respond to dynamic technology risks.

Professional Ethics

• Promote continuous improvement of the Corporate Governance Framework, including Enterprise Risk Management, Corporate Code of Conduct, Ethics, and Values.

Generic Accountabilities

Supervision

• Plan, supervise, and coordinate all activities to meet functional objectives, mentoring assigned staff to enhance their skills.

Budgets

• Provide input for Function/Department budgets and assist in their implementation and performance tracking.

Policies, Systems, Processes & Procedures

• Implement approved policies and procedures to support work program execution in alignment with the company and international standards.

Performance Management

• Contribute to achieving Performance Objectives in alignment with the company framework.

Innovation and Continuous Improvement

• Implement new tools and techniques to enhance operational quality and efficiency based on best practices.

Health, Safety, Environment (HSE) and Sustainability

• Comply with HSE policies, procedures, and legislation in line with international standards.

Reports

• Provide input for Management Information System (MIS) and progress reports for company Management.

Communications & Working Relationships

Internal

• Regular contacts with operational level management within all BLDs and at all management levels concerning audit programs and findings.
• Frequent communication with Group Companies for knowledge sharing.

External

• Occasional communications with Internal Audit Service Provider(s), the Abu Dhabi Accountability Authority (ADAA), and the company External Auditors to ensure adequate coordination and audit coverage.

Minimum Qualification

• Bachelor’s degree in computer science or a related technology discipline.

Minimum Experience, Knowledge & Skills

• 8-10 years of relevant experience in D&T or IT auditing/application domain (SAP/GRC), particularly in oil and gas operations.
• Advanced technical knowledge of enterprise applications landscape (SAP & GRC), operating systems, process flows, and database management (Oracle/MS SQL).
• Expertise in technology-related risks in areas like Cloud, SaaS, Access Management, digitalization, and automation.
• Proficient knowledge of DS&S processes, including system/software development, infrastructure reviews, access management, and change management.
• Familiarity with frameworks/standards like COBIT, ITIL, OWASP, ISO27001, ISO20000 as applied to IS/IT auditing.

Professional Certifications

• IT audit certification (CISA) is required or must be obtained within one year of joining; other certifications like CISM, COBIT, and technical certifications (SAP, GRC, RPA) are desirable.