IT Risk and Internal Audit Manager

You will lead and execute IT-focused internal audit engagements across PIH's Group technology environment — covering IT general controls, cybersecurity, ERP systems, data integrity, and emerging technology risks. You will also oversee the Senior IT Auditor and work closely with the broader IA team to embed IT audit perspective into operational and financial audit engagements.

Key Responsibilities

• Plan and lead IT audit engagements across PIH's Group technology environment, including IT general controls (ITGCs), application controls, cybersecurity, access management, change management, and business continuity
• Lead ERP-focused audit work, including SAP access controls, segregation of duties (SoD), master data governance, and system configuration reviews across Finance, Procurement, and HR modules
• Assess IT risks across key business systems, infrastructure, and data environments, and translate findings into clear business risk and control language for non-technical stakeholders
• Develop and execute IT-specific Risk Control Matrices (RCMs), distinguishing design effectiveness (DE) from operating effectiveness (OE)
• Support the integration of data analytics and continuous monitoring into the broader IA function, including automated control testing and exception-based reporting
• Draft and review IT audit reports, ensuring findings are accurate, risk-rated, and accompanied by practical remediation recommendations
• Manage the full finding lifecycle from identification through to remediation closure
• Supervise, coach, and review the work of the Senior IT Auditor
• Contribute to the annual risk-based audit planning process, advising on IT and technology risk across the Group audit universe
• Liaise with IT, Information Security, and business process owners to coordinate audit activity and validate findings

Requirements

• Bachelor's degree in Information Technology, Information Systems, Computer Science, or related field; professional certification required or near completion (CISA, CRISC, CISSP, or equivalent)
• Minimum 7–9 years of IT audit experience, including at least 2 years in a supervisory or management capacity
• Strong hands‑on experience with ERP audit, particularly SAP (FI/CO, MM, HCM) — access controls, SoD, and application control reviews
• Solid understanding of IT general controls frameworks (COBIT, ISO 27001, NIST) and their application in an audit context
• Experience with data analytics tools (ACL/Galvanize, IDEA, Power BI, SQL) in support of audit and continuous monitoring
• Demonstrated ability to manage stakeholders and communicate IT risk findings at senior management and Audit Committee level
• Based in or willing to relocate to Doha, Qatar