IT Risk and Internal Audit Manager

Role Overview

This position leads IT-centered internal audit work across PIH’s group technology landscape. The role covers control reviews around IT general controls, cyber security, ERP platforms, data quality and integrity, and risks tied to new technologies. In addition, you will guide the Senior IT Auditor and partner with the wider internal audit team to bring a strong technology-risk lens into operational and financial audits.

Key Responsibilities

• Design, plan, and carry out IT audit assignments across the group’s technology environment, including IT general controls, application controls, cyber security, access governance, change controls, and business continuity arrangements.
• Perform ERP audit reviews, with emphasis on SAP access management, segregation of duties, master data oversight, and configuration controls within Finance, Procurement, and HR modules.
• Evaluate risks in key systems, infrastructure, and data environments, and present the results in straightforward business-risk terms for stakeholders who are not technical experts.
• Create and maintain IT-specific risk and control matrices, clearly separating design effectiveness from operating effectiveness.
• Help expand data analytics and continuous monitoring within internal audit, including automated testing of controls and reporting based on exceptions.
• Prepare and quality-check IT audit reports so that issues are accurately described, properly risk-rated, and supported by realistic corrective actions.
• Own the end-to-end issue tracking process, from discovery through remediation and final closure.
• Supervise, coach, and review the work completed by the Senior IT Auditor.
• Support the annual risk-based audit planning cycle by advising on technology and IT risk areas across the group audit universe.
• Work with IT teams, information security, and business process owners to schedule audit work and confirm the accuracy of findings.

Requirements

• A bachelor’s degree in Information Technology, Information Systems, Computer Science, or a closely related discipline is required.
• Professional certification such as CISA, CRISC, CISSP, or an equivalent qualification is required or should be nearly completed.
• You should have 7 to 9 years of IT audit experience, including at least 2 years in a supervisory or people-management role.
• Strong practical experience with ERP auditing, especially SAP FI/CO, MM, and HCM, including access controls, segregation of duties, and application control assessments.
• Good working knowledge of IT general controls frameworks such as COBIT, ISO 27001, and NIST, and the ability to apply them in audit work.
• Hands-on use of analytics and monitoring tools such as ACL/Galvanize, IDEA, Power BI, and SQL in an audit setting is needed.
• You must be able to engage senior stakeholders confidently and communicate IT risk results to management and Audit Committee audiences.
• Applicants must already be based in Doha, Qatar, or be prepared to relocate there.

Additional Information

This is a full-time, onsite position in Doha, Qatar. The source provided no salary, perks, openings count, start date, or application deadline details.