Conduct IT audits to assess the effectiveness of information technology controls, systems, and related processes.
Evaluate IT general controls, including user access management, system changes, IT operations, and data backup procedures.
Assess information security controls, data protection practices, and system configurations to identify potential vulnerabilities and risks.
Review IT policies, procedures, and documentation to ensure compliance with internal requirements and applicable regulations.
Identify IT control weaknesses, security gaps, and technology-related risks, and recommend appropriate corrective actions.
Evaluate access permissions, segregation of duties, and controls over critical business applications and information systems.
Assess the effectiveness of IT disaster recovery plans, business continuity procedures, and backup and recovery processes.
Assist in preparing IT audit plans, testing procedures, working papers, and reports documenting findings and recommendations.
Follow up on identified audit findings and monitor the implementation of corrective actions.
Support assessments of compliance with relevant IT standards, security frameworks, and regulatory requirements.
Collaborate with IT, Information Security, Risk, Compliance, and other departments to strengthen technology controls and improve IT risk management practices.
Qualifications
Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field.
1 to 4 years of relevant experience in IT auditing, information security, IT risk management, systems administration, or technology assurance.
Basic knowledge of IT general controls, information security principles, and technology risk assessment.
Familiarity with access management, change management, IT operations, databases, and system controls.
Understanding of IT governance frameworks and security standards, such as COBIT and ISO 27001, is an advantage.
Strong analytical, technical, and problem-solving skills, with the ability to identify control weaknesses and assess technology risks.
Proficiency in Microsoft Office, particularly Excel; familiarity with audit tools, IT systems, or data analysis tools is an advantage.
Excellent communication and report-writing skills, with the ability to document technical findings clearly.
Strong attention to detail, integrity, professional ethics, and organizational skills.
Ability to work collaboratively with technical and non-technical stakeholders while meeting deadlines.
Professional certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), or CompTIA Security+, or progress toward obtaining them, are an advantage.
نحن نستخدم ملفات تعريف الارتباط لضمان حسن سير عمل موقعنا. للحصول على تجربة زيارة محسنة ، نستخدم منتجات التحليل. يتم استخدامها عندما توافق على "الإحصائيات".بيان الخصوصية