Senior Information Technology Auditor

About the Organization

Our client is a premier financial market entity based in Qatar, situated at the heart of the nation’s capital markets. The institution is currently advancing its technological infrastructure while enhancing its assurance functions to support the ongoing transformation.

Job Overview

The Senior IT Auditor will spearhead, plan, and carry out risk-centered IT audit and advisory assignments throughout the organization. This position delivers independent validation concerning IT governance, cybersecurity, information security, IT infrastructure, software applications, cloud frameworks, data oversight, digital transformation projects, system deployment, business continuity, and adherence to technology-related regulations. This role aids the Internal Audit division by scrutinizing the effectiveness and sufficiency of governance, risk management, and internal controls within the technology space, also playing a key role in evolving IT audit expertise and continuous auditing methodologies.

Key Responsibilities

• Lead and perform IT audit tasks based on risk assessments following the sanctioned annual audit roadmap.
• Evaluate IT governance structures, strategic IT planning, technology risk controls, and operational IT models.
• Assess cybersecurity leadership, security monitoring processes, vulnerability evaluation, penetration testing, and cyber resilience protocols.
• Review internal information security policies including identity and privileged access management, encryption, and incident response management.
• Examine IT general controls such as logical access, change management, backups, IT operations, and incident handling procedures.
• Audit fundamental business platforms and application systems, analyzing application controls and system data interfacing.
• Inspect cloud platforms, outsourced IT provisions, and third-party technology hazard exposure.
• Review data management practices encompassing governance, quality, privacy, protection, and records administration.
• Evaluate preparedness and plans for business continuity and disaster recovery.
• Perform pre- and post-assessment of major technology deployments and digital transformation projects.
• Apply data analytic tools and ongoing audit processes to improve audit thoroughness.
• Ensure compliance with regulatory mandates, security standards, corporate policies, and industry norms.
• Draft audit documentation, report outcomes to leadership, and track corrective action progress.
• Guide and train junior IT audit team members and support enhancement of audit procedures, instruments, and quality validations.

Qualifications

• Bachelor’s degree in IT, Computer Science, Information Systems, Cybersecurity, Computer Engineering, or allied fields, with preference for master's qualifications.
• Certifications such as CISA, CISSP, CISM, CRISC, CIA or their equivalents are required.
• At least 8 years of relevant professional experience in IT auditing, information security, IT risk management, or IT governance.
• A minimum of 3 years managing complex IT audits.
• Comprehensive understanding of cybersecurity frameworks, IT governance, cloud technologies, and security best practices.
• Hands-on experience auditing IT infrastructure, systems, cloud services, and IT projects.
• Proficiency in deploying data analytics and technology-driven audit approaches.
• Strong analytical reasoning, issue resolution abilities, and proficiency in report compilation.
• Experience within financial services, capital markets, banking, or regulated sectors is advantageous.
• Additional credentials in cloud security, data analytics, project management, or digital technology implementation are considered a plus.