Internal Audit Manager IT Audits

ADSS is a successful retail and institutional brokerage based in Abu Dhabi. The company is currently undergoing a multi-year transformation to become a fast growing, purpose-led, data-driven enterprise that delivers market-leading personalized content, propositions and experiences to traders. To reinforce client-centricity the company structure, technology and operations are being redesigned alongside the crafting of a high-performance culture underpinned by The ADSS Way. The objective is for ADSS to become a dynamic and innovative, trusted market leader as measured by feedback from clients, talent, shareholders and competitors.

The Internal Audit Manager IT Audits is responsible for leading and delivering independent, risk-based internal audits over ADSS's technology environment. This includes digital platforms, trading and client systems, cybersecurity, IT operations, data governance, and technology-enabled business processes.

The role provides assurance and advisory insight on technology risks, control effectiveness, and resilience, supporting ADSS's regulatory obligations, operational integrity, and strategic digital transformation initiatives.

Key Responsibilities and Accountabilities

Strategic and Operational

IT Audit Planning & Delivery

• Develop and execute a risk‑based IT audit plan and align it with the approved Internal Audit Plan, covering:
• Internal audit planning and delivery for:
• Core business systems and applications
• Digital and client‑facing platforms
• Cybersecurity and information security controls
• IT infrastructure, cloud services, and third‑party technology risks
• IT operations, change management, and data governance
• Technology projects, system upgrades, and digital transformation initiatives
• Lead end‑to‑end IT audit engagements, including planning, risk assessment, fieldwork, reporting, and issue/ action plans follow‑up.
• Evaluate the design and operating effectiveness of IT general controls (ITGCs) and application controls supporting front‑, middle‑, and back‑office operations.

Cybersecurity, Resilience & Technology Risk

• Lead audits of cybersecurity, vulnerability management, logical access controls, incident management, disaster recovery, and business continuity arrangements.
• Assess technology resilience, system availability, and recovery capabilities in line with regulatory expectations and business criticality.
• Evaluate third‑party and outsourced technology risks, including vendor governance and service‑level controls.

Advisory & Change Enablement

• Provide advisory input on IT governance frameworks, information security policies, SDLC controls, and change management processes.
• Participate in audits and reviews of major technology initiatives, providing early assurance over control design and risk management during system development and implementation.
• Advise management on remediation strategies that are practical, risk‑focused, and aligned with business objectives.

Reporting & Issue Management

• Prepare clear, concise, and high‑quality audit reports, articulating risks, root causes, and actionable recommendations.
• Engage with management to agree on appropriate remediation actions and timelines.
• Track and monitor remediation of IT and cyber‑related audit issues, escalating delays or high‑risk matters to the Director – Internal Audit as required.

Stakeholder Engagement & Collaboration

• Build effective working relationships with IT, Information Security, Risk, Compliance, and business stakeholders.
• Act as a trusted Internal Audit partner on technology risk matters while maintaining independence and objectivity.
• Stay informed on emerging technology risks, cyber threats, fintech developments, and relevant regulatory and industry standards.

Internal Audit Delivery and Administration

• Assist Director Internal Audit with delivery and execution of project related and administrative internal audit activities.
• Assist Director Internal Audit with execution of internal audit plan, including internal audits of business and support processes.
• Assist Director Internal Audit with execution of administrative and department management activities.
• Engage with management to agree on appropriate remediation actions and timelines.
• Conduct follow up of status of implementation, assess the completion status and document completion status related to the post audit action plans implementation.
• Assist Director Internal Audit with preparation of periodic management and Audit and Risk Committee reporting.

Qualifications

• Bachelor's degree in Accounting, Finance, Business Administration, Information Systems, or a related discipline.
• Professional certifications, preferred: CISA, CIA, CA, CPA, or equivalent.

Experience

• Minimum 7 years experience in internal audit, external audit, or technology risk, preferably within financial services or a large regulated organization.
• Strong hands‑on experience in IT auditing, cybersecurity, ITGCs, application controls, and technology risk management.
• Proven experience leading audit engagements and managing stakeholders.
• Working knowledge of the IIA International Standards for the Professional Practice of Internal Auditing.

Skills and Competencies

• Strong technical knowledge of IT, cybersecurity, and technology risk domains.
• Sound risk assessment, analytical, and problem‑solving skills.
• Ability to translate technical risks into clear, business‑focused insights.
• Effective leadership, coaching, and collaboration skills.
• Strong written and verbal communication, including audit reporting.