Director-Support Services Audit

• KEY ACCOUNTABILITIES:

Strategic Audit Leadership & Planning

• Develop and implement integrated, risk-based audit plans for both Financial & Administration and IT & Cybersecurity functions, ensuring alignment with NADEC’s strategy and risk appetite.
• Identify and prioritize key risk areas for both streams through regular consultation with executive management, review of business developments, and consideration of regulatory requirements.
• Set the vision, strategy, and annual objectives for both audit streams, incorporating best practices, digital tools, and new technologies.

Audit Program Oversight & Quality Assurance

• Oversee the planning, execution, and quality of all audits and assurance reviews in financial, administrative, IT, and cybersecurity domains.
• Approve audit engagement scopes, timelines, and resource allocation; review and ensure high quality of working papers, findings, and recommendations.
• Ensure rigorous application of IIA Standards, departmental methodology, and adoption of data analytics and digital audit tools in both functions.
• Champion cross-functional audit projects where finance, administration, Support function and IT/cybersecurity risks intersect.

Stakeholder Management & Advisory

• Serve as the principal liaison with executive management, process owners, and functional leaders for support services audit matters.
• Provide expert advisory and consulting support on key risks, financial integrity, process improvement, IT controls, cybersecurity threats, and regulatory compliance.
• Prepare and submit audit reports and recommendations to the Chief Internal Audit Officer for further escalation as required.

People Leadership & Talent Development

• Lead, coach, and develop Audit Managers and teams in both financial/admin and IT/cybersecurity streams, fostering a collaborative, high-performance culture.
• Establish clear performance expectations, conduct regular evaluations, and support ongoing professional development and certification.
• Promote continuous learning, innovation, and knowledge-sharing across both streams.

Governance, Risk & Compliance

• Promote strong governance, internal controls, and risk management for financial, administrative, IT, and cybersecurity processes.
• Ensure compliance with all internal policies, regulatory requirements (including those from CMA, SFDA, NCA, and international cybersecurity frameworks), and legal mandates.
• Maintain high standards of integrity, confidentiality, and independence in all audit activities.

Continuous Improvement & Innovation

• Drive continuous improvement in audit methodologies, leveraging digital solutions and best practices from both the financial and IT/cybersecurity audit professions.
• Lead quality assurance and improvement initiatives, benchmarking performance and ensuring readiness for internal and external assessments.
• Identify emerging risks (e.g., digital transformation, cybersecurity threats, regulatory changes) and ensure audit plans and approaches are adapted accordingly.

Reporting & Follow-up

• Oversee the timely preparation and submission of comprehensive audit reports for both audit streams to the Chief Internal Audit Officer.
• Ensure management action plans are realistic, tracked, and followed up until closure.
• Provide regular updates to the CIA on remediation status and outstanding risks/issues for both functional areas.
• Oversee various Internal Audit projects beyond core function audits, this may involves collaborating with cross-functional teams to enhance audit processes and drive continuous improvement initiatives.

• JOB CONTEXT
• Executive-level position with broad responsibility for two critical support audit streams, requiring strong leadership and expertise in both financial/administrative and IT/cybersecurity audit disciplines.
• Works closely with the Internal Audit leadership team and supports the CIA in presenting results to the Audit Committee and Board as needed.
• Responsible for the confidentiality and sensitivity of information in both audit streams.
• Represents Internal Audit in high-level meetings, risk forums, and with external auditors/regulators when delegated.

• COMMUNICATIONS & WORKING RELATIONSHIPS:

Internal

Department (Within NADEC)

• Reports to the Chief Internal Audit Officer.
• Directly supervises Audit Managers for Financial & Admin Audit and IT & Cybersecurity Audit, with indirect responsibility for their teams.
• Collaborates regularly with executive management, finance, IT, HR, compliance, and other support functions.
• Provides reports and recommendations to the CIAO and supports cross-functional risk initiatives.

External

External Customers / Companies / Clients (Outside NADEC)

• Acts as the main Internal Audit contact for external auditors, consultants, and regulators regarding support services (e.g., financial, IT/cybersecurity audits), under the guidance of the CIA.
• Represents Internal Audit in professional and sector forums as delegated.

• QUALIFICATIONS, EXPERIENCE, & SKILLS:

Education and Certifications

Education:

• Bachelor’s degree in accounting, Finance, Business Administration, Information Technology, Computer Science, Supply Chain or a closely related field.
• A master’s degree, MBA, or equivalent is strongly preferred.

Professional Certification:

• Certified Internal Auditor (CIA) required.
• Additional certifications in financial audit (CPA, ACCA, CMA, SOCPA, etc.) and/or IT/cybersecurity audit (CISA, CISSP, CISM, CRISC, etc.) or Certified Supply Chain Professional (CSCP) strongly preferred.

Experience:

• Minimum 12–15 years of progressive internal/external audit, risk management, or IT/cybersecurity experience, with at least 5 years in a senior leadership or director-level audit role overseeing both financial/support and IT/cybersecurity domains.
• Demonstrated ability to lead cross-functional audit teams and deliver results in complex environments

Skills:

• Exceptional strategic leadership and people management abilities.
• Deep expertise in internal audit standards, financial controls, IT governance, cybersecurity, and regulatory frameworks.
• Advanced skills in digital audit tools, data analytics, and project management.
• Strong stakeholder management, influencing, and negotiation skills.
• Excellent report writing, executive presentation, and communication abilities
• Highest standards of integrity, sound judgment, and commitment to continuous improvement.

Competencies

Technical

• Multi-Disciplinary Audit Leadership (Advanced)
• Financial Controls & Reporting (Advanced)
• IT & Cybersecurity Audit (Advanced)
• Governance, Risk & Internal Control (Advanced)
• Stakeholder Engagement & Influence (Advanced)
• Audit Quality, Digitalization & Innovation (Advanced)
• Regulatory & Standards Compliance( Advanced)