IT Audit Specialist

About the Company xCube is a Fintech company based in the UAE, dedicated to enhancing the competitiveness of Capital Markets in the UAE by introducing the latest financial technologies and innovations to the region.With its origins as a market maker, xCube has since expanded its scope, utilizing its expertise in Capital Markets to provide a brokerage platform that leverages cutting-edge technologies.About the Role The IT Internal Auditor be working closely with the Head of Internal Audit, you'll help strengthen our technology assurance capability by developing automated monitoring, applying data analytics, assessing technology and cybersecurity risks, and providing independent assurance over the systems that support our brokerage platform and trading technology.ResponsibilitiesDevelop and maintain the IT Internal Audit Risk Assessment and identify key technology and cybersecurity risks.Support the development of a risk-based IT Internal Audit Plan.Plan and conduct audits covering cybersecurity, infrastructure, networks, applications, databases, cloud, integrations, access management, and IT operations.Assess vulnerabilities, control weaknesses, security gaps, and technology risks.Provide assurance over the security, availability, resilience, and integrity of critical systems, including xCube’s mobile application and web platform.Review areas including network security, vulnerability management, incident response, database security, disaster recovery, and third-party technology risks.Develop continuous auditing and monitoring tools using automation, data analytics, dashboards, scripts, alerts, and exception reporting.Communicate findings and recommendations to management and follow up on agreed corrective actions.Support the Head of Internal Audit in providing technology and cybersecurity assurance to senior management and the Board Audit Committee.QualificationsBachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Security, Computer Engineering, Information Systems, or a related field.Required SkillsStrong knowledge or practical experience in several of the following areas:Cybersecurity and penetration testingDigital forensics and incident investigationData analytics, automation, scripting, or programmingPreferred SkillsProfessional certifications are preferred but not mandatory, including:CISA, CISSP, CEH, OSCP, Security+, CCNA, CCSP, cloud certifications (AWS/Azure/Google Cloud), digital forensics certifications, or other relevant IT and cybersecurity certifications.*Suitably qualified Emirati candidates will be given preference. Applications from all qualified candidates are welcome.