Role Overview:
The Internal IT Auditor is responsible for evaluating IT systems, financial, and operational processes to ensure accuracy, efficiency, and compliance with internal policies and external regulations. The role focuses on strengthening internal controls, identifying risks, and supporting continuous improvement across the organization.
Key Responsibilities:
-
Conduct internal IT and operational audits to assess the effectiveness of controls and governance frameworks.
-
Evaluate IT systems, applications, and infrastructure for security, reliability, and compliance.
-
Identify risks including fraud, data breaches, inefficiencies, and control gaps.
-
Ensure adherence to relevant standards such as
ISO 27001, QCSF, NIA
, and applicable financial frameworks (e.g., IFRS, GAAP).
-
Review and assess financial and operational processes for accuracy and regulatory compliance.
-
Prepare detailed audit reports, highlighting findings, risks, and actionable recommendations.
-
Work closely with stakeholders to implement corrective actions and process improvements.
-
Monitor and follow up on audit findings to ensure timely resolution.
Requirements:
-
Proven hands-on experience in internal IT auditing within an organization.
-
Strong understanding of IT controls, cybersecurity frameworks, and audit methodologies.
-
Experience in evaluating financial and operational processes.
-
Familiarity with GCC regulatory frameworks and standards is preferred.
-
Strong analytical, problem-solving, and reporting skills.
-
Excellent communication and stakeholder management abilities.
Preferred Certifications:
-
ISO 27001 (Lead Auditor/Implementer)
-
QCSF / NIA (or GCC equivalent frameworks)
-
Additional certifications such as
CISA, CIA, CPA, or ACCA
are an advantage
Experience:
-
Minimum 7- 20 years of relevant experience in IT/Internal Audit roles (level may vary based on seniority)