Information Technology Audit Manager

Role Overview

The IT Audit Manager is charged with planning, directing, and carrying out risk-focused audits of technology environments. The position provides independent assurance over areas such as technology governance, cybersecurity, enterprise systems, IT operations, and technology controls, while also helping the organization reinforce its control framework, protect information assets, and improve the efficiency of technology-supported business processes.

Key Accountabilities

• Help shape and deliver the annual IT audit plan so it reflects business priorities and the organization’s most important technology risks.
• Provide objective assurance on technology governance, cybersecurity, digital transformation programs, and new or emerging technology risks.
• Contribute to the ongoing improvement of IT audit approaches, tools, and technology-enabled audit methods.
• Keep up to date with new technologies, cyber threats, artificial intelligence, and current industry practices to strengthen audit scope and impact.
• Serve as a trusted source of advice to management on matters related to technology risk and control.
• Manage audit resources and budgets efficiently while delivering the approved IT audit plan.
• Identify ways to improve efficiency, reduce technology-related exposure, and strengthen internal controls through actionable audit recommendations.
• Encourage the use of analytics, automation, and continuous monitoring to improve audit quality and coverage.
• Help detect and prevent financial, operational, and technology control weaknesses through effective assurance work.
• Develop strong working relationships with IT, Digital, Cybersecurity, Risk, and business teams.
• Lead discussions with management to confirm audit observations and agree on realistic corrective actions.
• Present audit results, recommendations, and technology risk insights clearly and professionally to stakeholders.
• Track agreed management actions and follow up to ensure issues are resolved within the expected timeframe.
• Work with internal and external assurance teams, where relevant, to improve coordination and overall coverage.
• Plan, lead, and execute risk-based IT audits in line with approved methodologies and professional standards.
• Evaluate the design and operating effectiveness of IT general controls, application controls, and automated business controls.
• Review access controls, segregation of duties, change management, system operations, backup and recovery, and cybersecurity safeguards.
• Assess controls in ERP, CRM, and other business-critical applications, including SAP and connected systems.
• Perform technology risk assessments to identify control gaps, process weaknesses, and improvement opportunities.
• Use data analytics and technology-driven audit techniques to broaden coverage and highlight exceptions or control issues.
• Review technology projects, system rollouts, and digital initiatives to confirm that proper controls are embedded across the project lifecycle.
• Prepare audit reports, document findings, and share recommendations with management.
• Carry out follow-up reviews to verify the effectiveness and durability of corrective actions.

Qualifications and Experience

• A bachelor’s degree in Information Technology, Information Systems, Computer Science, Cybersecurity, Accounting, or a related field is required.
• At least 8 years of experience in IT audit, technology risk, internal audit, information security, or a similar discipline is required.
• Demonstrated experience independently leading and delivering IT audit engagements.
• Working knowledge of SAP ERP architecture and core IT controls.

Skills and Professional Knowledge

• Certified Information Systems Auditor (CISA) certification.
• Solid understanding of IT general controls, cybersecurity controls, technology risk management, and audit methods.
• Strong written communication, reporting, and stakeholder management capabilities.

Additional Information

This is a full-time onsite role based in Sharjah, Sharjah Emirate, United Arab Emirates. No salary, benefits, or number of vacancies were specified in the source information.