IT Auditor

Job Title

IT Auditor

Location

Position Summary

Responsible for ensuring IT internal controls are properly set and maintained. Examines the organizations IT systems, governance, and networks to ensure that sufficient controls are implemented and that data is securely stored and available. Classifies technology issues and provides additional recommendations to management with solutions to fix internal controls.

The IT Auditor must have the ability to understand the business context/environment and align their audits to OMT products, services, processes, ensuring as such that the audit recommendations are relevant and equally beneficial to both IT and business operations.

The IT Auditor must have a technology-oriented mindset (mobile apps, payment networks, etc.), and must be able to adapt to the digital era to address challenges effectively.

Primary Duties and Responsibilities

• Plans and conducts internal audit activities including determination of audit objectives, identifying major controls and risks, and creating the right audit program
• Carries out reviews of organizational activities assigned following departmental standards
• Examines internal IT controls, evaluates the design and operational effectiveness, determines exposure to risk, and develops remediation strategies
• Collaborates with IT and business units to understand OMT service requirements and ensure that the systems and applications meet these needs
• Evaluates the IT systems supporting the full lifecycle of OMT products and services from development to deployment
• Plans, develops and executes corporate IT audit engagements and provides accurate assessment of operational performance and internal control processes
• Identifies and conducts risk assessments and set mitigation plans by applying knowledge of  IT industry trends and present IT environment
• Audits the security measures set for the protection of OMT’s data, systems, and networks
• Challenges, tests and identifies network and system vulnerabilities, and recommends counteractive strategies to protect the network
• Reviews, evaluates, and tests application controls
• Provides recommendations and guidance on identified security and control risks
• Produces and reviews reports and audit work papers, ensuring effective documentation of audit results; recommends actions to be taken
• Manages internal audit projects or studies such as fraud investigation, risk assessment, due diligence acquisition reviews, audit department policy updates, etc.

Knowledge, Skills, and Abilities

Qualifications:

• University degree in information technology/computer information systems or related

• Masters or MBA

• Certified Information Systems Auditor (CISA) or Certified Internal Auditor (CIA) is a must

Technical Skills:

• Advanced English written & spoken. Moderate in Arabic. French is a plus

• Expertise in IT systems, applications, and infrastructure

• Strong understanding of business and system processes

• Great awareness of cybersecurity trends and hacking techniques

• Excellent understanding of Firewalls, VPN, Data Loss Prevention, IDS/IPS, Web-Proxy, and Information Security Audits

• Advanced use of Microsoft Office tools

• Thorough understanding of key IT systems used

• Clear understanding of IA audit methodologies

• Experience in the ISO 27001 implementation and management

Relevant years of experience:

• 8 – 13 years of experience in IT Audit

Key Behavioral Competencies:

• Excellent analytical skills and attention to detail

• Problem-solving skills

• Ability to work under pressure

• Advanced verbal and written communication skills with the ability to maintain tact and diplomacy in contentious conversations

• Excellent organizational skills and attention to detail

• Excellent interpersonal and customer service skills

• Ability to identify and resolve discrepancies and to notice questionable trends or frauds

• High level of ethics and compliance

• Proven reliability and trustworthiness

• Ability to maintain confidentiality

• Ability to work autonomously and in a fast-paced environment