IT Internal Auditor - ACL​/Data Analytics

IT Internal Auditor - ACL / Data Analytics

Qatar

We are hiring an experienced IT Internal Auditor to join a well-established organisation in Qatar.

The successful candidate will be responsible for assessing technology controls, identifying risks and evaluating the effectiveness of IT processes and systems. A major focus of this position will be using ACL and data analytics to analyse large datasets and identify anomalies, exceptions and potential control weaknesses.

• Plan and execute risk-based IT audits.
• Evaluate IT General Controls (ITGCs) across access management, change management, IT operations, backups and security.
• Assess application controls and business processes to identify risks and control gaps.
• Use ACL (Audit Command Language) to extract, analyse and validate large volumes of data.
• Develop ACL scripts to identify exceptions, duplicates, unusual transactions and control violations.
• Conduct continuous auditing and data analytics to identify trends and anomalies.
• Review user access,
  Segregation of Duties (SoD), privileged access and system activity logs.
• Test the completeness and accuracy of data used within audit procedures.
• Document audit findings, risks, evidence and recommendations.
• Prepare audit reports and communicate findings to management and key stakeholders.
• Track remediation activities and conduct follow-up testing.
• Support compliance audits against frameworks such as COBIT, ISO 27001 and PCI DSS
  .
• Collaborate with Internal Audit, Information Security, Risk, Compliance and IT teams.

• 5–7 years' relevant experience within IT Audit, Internal Audit, Technology Risk or Information Security.
• Hands-on ACL experience is essential.
• Strong understanding of ITGCs and application controls
  .
• Experience using data analytics to extract and analyse data and identify anomalies.
• Knowledge of risk-based audit methodologies and internal control frameworks.
• Bachelor's degree in IT, Computer Science, Accounting, Finance or a related discipline.
• Strong analytical, documentation, problem-solving and stakeholder communication skills.

• CISA
• CIA
• CRISC
• ISO 27001
• Other relevant information security or audit certifications