Al Nahiya Group Looking For IT Auditor Full Time

Conduct/Lead ITaudits and reviews of systems, applications and IT processesincluding:oPre/Post Post-implementation reviews of system implementations orenhancementsoCyber securityreviews(e.g. network, operating system and datacenter) oITLandscape/Baseline Assessmento Business Application Reviews Execute  audits (perform fieldwork, prepare draft report, and carry-out exitmeetings) of Group s operations to assess IT controls, operationalefficiencies, and compliance with allpolicies,Procedures andregulations, both at Corporate and Entities within agreedtimelines.Plan auditsassignments: developing the draft terms of reference, obtaining anunderstanding of the entity and area being audited, preparing theRisk and Controls Matrix, and designing the audit procedures to beperformed. Understand and document the inherent risks in theprocesses.Fieldwork:Carry-out audit procedures, including documenting and assessing thedesign and effectiveness of internal controls. Maintain anup-to-date status of work done against the audit procedures, andprovide weekly updates to the direct line manager, and addressreview comments. Prepare and discuss agile reports with auditees(every two weeks). Document the test results in line with theinternal auditmanual.Reporting:Discuss audit results with relevant stakeholders (typically at theL2 level at Corporate and L1 Level at the entities), and obtainconfirmation on the factual accuracy of the audit outcomes, draftthe recommendations, and obtain the management responses&actionplans.Leverage datafor each audit assignment and identifies opportunities to automatetest procedures. This would include understanding the availabledata, linkages with inherent risks, data analytics (using excel orother tools) and validating theresults.Maintain a logof agreed action plans, and follow-up on a periodic basis on thestatus of implementation of the agreed action plans. Validate theimplementation of the agreed actionplans. Conduct specialaudits and consulting assignments in line with the internal auditmanual.Requirements Minimum3 years experience in ITAuditWithlarge organization (revenues in excess of USD 1 billion) or withexperience of working on IT assurance assignments of largeorganizations.Bachelors or Master s Degree in Computer Science, Information Technology or other relatedfieldCertificationin Information Systems, Assurance, e.g. Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker(CEH) KeySkills:MS Office Suite& Productivity Tools (advanced knowledge or expert in MSExcel)Ability to usedata analytics tools(beyond MSExcel)Proficiency in English language. Ability to write clear and succinct auditreports, free from factual inaccuracy and ambiguity. Clear andconfidentcommunicatorHas soundunderstanding of International Professional Practices Frameworkissued by the Institute of Internal Auditors Has  soundunderstanding and experience of end-to-end internal audit lifecycleUnderstand andhas experience in auditing ERP systems (SAP/Oracleetc)Has soundunderstanding of/and practical exposure to internal controls acrosscore business functions and activities (such as procurement, HR andpayroll, project management, finance & accounting,commercial, operations, contract management), risk management, andIT General Controls.Minimum 3 years experience in IT Audit With large organization(revenues in excess of USD 1 billion) or with experience of workingon IT assurance assignments of large organizations. Bachelor s or Master s Degree in Computer Science, Information Technology orother related field Certification in Information Systems,Assurance, e.g. Certified Information Systems Auditor (CISA),Certified Information Systems Security Professional (CISSP),Certified Ethical Hacker (CEH) KeySkills:MS Office Suite &Productivity Tools (advanced knowledge or expert in MS Excel)Ability to use data analytics tools(beyond MS Excel) Proficiency in English language. Ability to write clear and succinct auditreports, free from factual inaccuracy and ambiguity. Clear andconfident communicator Has sound understanding of International Professional Practices Framework issued by the Institute of Internal Auditors Has sound understanding and experience ofend-to-end internal audit life cycle Understand and has experiencein auditing ERP systems (SAP/Oracle etc) Has sound understandingof/and practical exposure to internal controls across core businessfunctions and activities (such as procurement, HR and payroll,project management, finance & accounting, commercial,operations, contract management), risk management, and IT General Controls.