Information Technology & Cybersecurity Audit Lead

IT & Cybersecurity Audit Lead is responsible for overseeing and executing technology, cybersecurity, and information systems audits across the organization. The role ensures that IT governance, data protection, and cyber risk management frameworks are effective, compliant, and aligned with corporate objectives. This position provides independent assurance on the adequacy of IT controls, cybersecurity resilience, and system integrity while identifying areas for improvement in alignment with best practices and international standards.IT Audit Planning & Risk Assessment:Develop and implement annual IT and cybersecurity audit (assurance & advisory) plans based on organizational risk assessments.Identify high-risk areas in IT operations, applications, infrastructure, and cybersecurity posture.Define audit scope, objectives, and methodologies in line with Global Internal Audit Standards (IIA), IT governance frameworks (e.g., COBIT, ISO 27001), ISACA guidelines, NIST guidelines, UAE Cyber Security Council, etc.IT & Cybersecurity Audits:Conduct audits of IT systems, networks, cloud infrastructure, and applications to evaluate control effectiveness and data integrity.Assess cybersecurity controls, incident response readiness, and compliance with data privacy regulations.Review access controls, system configurations, and change management processes.Identify vulnerabilities, assess potential threats, and recommend remediation actions.Governance, Risk & Compliance (GRC):Evaluate IT governance structures and ensure alignment with corporate policies and risk management frameworks.Monitor compliance with international cybersecurity standards, data protection regulations, and company IT policies.Review vendor risk management processes for outsourced IT and cloud services.Reporting & Recommendations:Prepare comprehensive audit reports highlighting control gaps, risks, and actionable recommendations.Present audit findings and risk insights to senior management and IT leadership.Track and verify the implementation of corrective actions and risk mitigation measures.Support the IA Leadership in the preparing the periodic updates to the Audit Committee, Board, etc.Continuous Improvement & Advisory, others:Advise management on IT risk management, cybersecurity maturity, and control improvements.Stay current on emerging cyber threats, digital transformation risks, and evolving regulatory requirements.Support awareness and training initiatives to strengthen cyber resilience across the organization.Assist the line manager in achieving the department objectives/KPIs in an efficient and effective manner.Perform other tasks as may be assigned by the line manager/IA leadership.QUALIFICATIONS & CERTIFICATIONS & EXPERIENCE (MANDATORY & PREFFERED):Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.Professional certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Auditor are preferred.Minimum of 8-12 years of experience in IT audit, cybersecurity audit, or information security governance.Strong understanding of IT systems, network security, cloud environments, and cybersecurity frameworks.SKILLS & COMPETENCIES (Technical, Behavioral and Soft):Technical Skills:IT & Cybersecurity AuditingRisk Assessment & IT Control EvaluationIT Governance & Compliance (COBIT, ISO 27001)Cyber Risk & Data Protection AssessmentAudit & Data Analysis Tools (ACL, Power BI, SAP, ServiceNow)Cloud & Infrastructure Security ReviewIncident Response & Vulnerability ManagementReporting & Stakeholder CommunicationArtificial Intelligence and emerging technologies.Behavioural Competencies:Customer Focus - Understands customer challenges and takes initiative to resolve them effectively.Accountability and Ownership - Manages projects with minimal supervision and ensures quality results.Agility and Adaptability - Manages change smoothly and supports others during transitions.Collaboration & Influence - Builds networks across functions and resolves conflicts constructively.Result Orientation - Sets clear goals and works proactively to achieve high performance.Integrity - Display highest standard of integrity in line with the IIA code of conduct/ethics.