About the Organization
Our client is a leading financial market institution in Qatar, operating at the center of the country's capital markets. The organization is undergoing significant technology modernization and is strengthening its assurance capabilities to support that transformation.
Job Summary
The Senior IT Auditor is responsible for planning, leading, and executing risk-based IT audit and advisory engagements across the organization. The role provides independent assurance over IT governance, cybersecurity, information security, infrastructure, applications, cloud environments, data governance, digital transformation initiatives, system implementation projects, business continuity, and technology-related regulatory compliance. The position supports the Internal Audit function by evaluating the adequacy and effectiveness of governance, risk management, and internal controls across the technology environment, while contributing to the development of IT audit capabilities and continuous auditing practices.
Roles And Responsibilities
- Lead and execute risk-based IT audit engagements in accordance with the approved annual audit plan.
- Assess IT governance frameworks, IT strategy, technology risk management, and IT operating models.
- Evaluate cybersecurity governance, security monitoring, vulnerability management, penetration testing, and cyber resilience controls.
- Review information security controls including identity and access management, privileged access management, data encryption, and security incident management.
- Evaluate IT General Controls (ITGCs) covering logical access, change management, backup and recovery, IT operations, and incident management.
- Conduct audits of core business platforms and supporting applications and assess application controls and system interfaces.
- Assess cloud computing environments, outsourced IT services, and third-party technology risks.
- Review data governance, data quality, data privacy, data protection, and records management frameworks.
- Evaluate business continuity management and disaster recovery capabilities.
- Conduct pre-implementation and post-implementation reviews of major technology projects and digital transformation initiatives.
- Perform data analytics and continuous auditing procedures to enhance audit effectiveness.
- Evaluate compliance with regulatory requirements, information security standards, internal policies, and industry best practices.
- Prepare audit reports, present findings to management, and monitor implementation of agreed management action plans.
- Mentor and coach IT audit staff, and contribute to the enhancement of Internal Audit methodologies, tools, and quality assurance activities.
Requirements
- Bachelor's degree in information technology, Computer Science, Information Systems, Cybersecurity, Computer Engineering, or a related discipline (Master's degree preferred).
- Professional certification such as CISA, CISSP, CISM, CRISC, CIA, or equivalent.
- Minimum 8 years of relevant experience in IT audit, information security, technology risk, or IT governance.
- Minimum 3 years leading complex IT audit engagements.
- Strong knowledge of cybersecurity frameworks, technology governance, cloud technologies, and information security practices.
- Experience auditing infrastructure, databases, applications, cloud services, and technology projects.
- Experience using data analytics and technology-enabled audit techniques.
- Advanced analytical, problem-solving, and report-writing skills.
- Experience within financial services, capital markets, banking, or other regulated industries is preferred.
- Additional certifications in cloud security, data analytics, project management, or digital technologies are an advantage.
