:JOB PURPOSE:To perform a comprehensive IT audit and evaluation of management controls over Information Systems activities in order to ensure smooth and timely progress of IT audit programs according to annual audit plans, and in accordance with corporate strategies, policies, international IT Audit Standard and directives. To prepare Information Systems audit reports as agreed with Department Manager - Specialized Audit to draft of final reports and recommendations and to follow up corrective action plans with concerned staff.Job Specific AccountabilitiesInternal Audit Planning

• Prepares and implements a comprehensive Risk Based IT audit program in close cooperation with Department Manager - Specialized Audit for reviewing and evaluating management controls over Information System Controls Environment, including hardware, software, applications and telecommunications concepts used in various divisions and departments, as per approved audit plan. Communicates findings to subordinates, discusses for correction and improvement

• Conducts preliminary review of IT areas to help establishing scope and develop audit plan. Reviews completeness, appropriateness and effectiveness of applications, embedded controls, processes, procedures and policies, and generates recommendations.

Internal Audit Execution

• Analyse and evaluate Information Systems embedded controls and follows up any systems development, acquisition and modification processes. Carries out general operations controls evaluation.

• Ensure completeness, appropriateness and effectiveness of applications processes, embedded controls and procedures, analyses deficiencies in terms of potential risks along with recommendations. Follows up on audit findings and audit report with concerned departments senior staff and manager to ensure implementation of agreed corrective action plans. Complete Audit Management System engagement working papers

• Analyses administrative, financial and operational applications systems and related procedures, and makes recommendations to improve application systems security measures. Follows IT audit procedures as outlined in IT audit program, and verifies compliance with pertinent laws and regulations.

• Conduct IT audit activities during field in coordination with IT auditors to ensure smooth and timely progress of audit programs.

Internal Audit Report

• Discusses with the concerned staff all problems, controls and other information systems related matters disclosed in IT audit reports. Discusses the results of the audit report and recommendations with Department Manager to recommend a defined action to improve applications embedded controls.

• Evaluates significance of deficiencies internal control environment and recommends areas for improvements.

• Perform the final audit report for Department Managers review, highlighting audit observation impacting the department/division and make practical recommendations in order to improve the internal control system

Internal Audit Follow upFollows up the implementation of corrective action by various audited departments/divisions, according to audit reports and corrective action plans, as agreed with the auditees. Reviews updating of Risk Based IT Audit ProgramsRequirementsQUALIFICATIONS, EXPERIENCE, KNOWLEDGE & SKILLS:Minimum QualificationBachelor Degree in IT/ISMinimum Experience & Knowledge & Skills

• 8 years of professional experience within IT Audit

• Strong verbal and written communication skills in English, knowledge of Arabic is an advantage

• In-depth knowledge of IT operations and technologies including databases, network devices, operating systems and applications

• Excellent report writing skills with the ability to clearly write complex issues

• Excellent knowledge of Microsoft Office, especially Word, Excel and PowerPoint

• Ability to work independently and as part of team

• Critical Thinking & Analysis skills

• Thorough understanding on the internal audit, corporate governance and risk management

Professional CertificationsAt least one professional qualifications from IT Auditing associations (CISA, CISM, CISSP)

Al Nahiya Group