IT Auditor
Summary
IT Auditor conducting internal IT and operational audits, evaluating systems, applications, and infrastructure for security, reliability, and compliance with ISO 27001, QCSF, NIA, and financial frameworks (IFRS, GAAP). Day-to-day work centers on risk identification, detailed audit reporting, and stakeholder follow-up to drive corrective actions.
Key Responsibilities:
• Conduct internal IT and operational audits to assess the effectiveness of controls and governance frameworks.
• Evaluate IT systems, applications, and infrastructure for security, reliability, and compliance.
• Identify risks including fraud, data breaches, inefficiencies, and control gaps.
• Ensure adherence to relevant standards such as ISO 27001, QCSF, NIA, and applicable financial frameworks (e.g., IFRS, GAAP).
• Review and assess financial and operational processes for accuracy and regulatory compliance.
• Prepare detailed audit reports, highlighting findings, risks, and actionable recommendations.
• Work closely with stakeholders to implement corrective actions and process improvements.
• Monitor and follow up on audit findings to ensure timely resolution.
Skills
Requirements:
• Proven hands-on experience in internal IT auditing within an organization.
• Strong understanding of IT controls, cybersecurity frameworks, and audit methodologies.
• Experience in evaluating financial and operational processes.
• Familiarity with GCC regulatory frameworks and standards is preferred.
• Strong analytical, problem-solving, and reporting skills.
• Excellent communication and stakeholder management abilities.
Preferred Certifications:
• ISO 27001 (Lead Auditor/Implementer)
• QCSF / NIA (or GCC equivalent frameworks)
• Additional certifications such as CISA, CIA, CPA, or ACCA are an advantage