Senior IT Internal Auditor

Job Title: Senior IT Internal AuditorRole Purpose: The Senior IT Internal Auditor is responsible for planning, executing, and leading IT audit engagements across the organization to evaluate the effectiveness of IT controls, risk management practices, and governance structures. The role ensures compliance with internal policies, regulatory requirements, and industry standards, while identifying risks and recommending improvements to strengthen IT systems, processes, and data securityKey Activities:Lead IT audit engagements based on the approved audit planDevelop audit scope, programs, and testing proceduresAssess IT general controls (ITGCs), application controls, and system configurationsEvaluate user access management, data integrity, and security controlsIdentify and assess IT risks and their impact on business operationsEnsure compliance with internal policies and external standards (ISO 27001, COBIT, NIST)Evaluate IT governance frameworks and risk management processesAssess cybersecurity controls and data protection practicesPrepare clear and comprehensive audit reports with findings and recommendationsPresent audit results to management and key stakeholdersMonitor and follow up on remediation actions and closure of audit findingsPerform data analysis using audit tools (e.g., ACL, IDEA, Excel)Review system logs, integrations, and application controlsAssess ERP systems (Oracle, SAP) for control effectiveness and risksProvide advisory support on IT projects and system implementationsRecommend control enhancements and process improvementsStay updated on emerging technology risks and audit best practicesIndustry / Domain:HoldingNecessary Knowledge and Experience:4–7years of experience in IT auditing or IT riskStrong experience in IT general controls (ITGC), application controls, and securityExperience auditing ERP systems (Oracle, SAP, etc.)Knowledge of IT governance, cybersecurity, and infrastructure controlsExperience in risk-based audit methodologiesEducation and Certification Minimum Requirements:Bachelor’s degree in Information Technology, Computer Science, or related fieldProfessional certifications, preferably holding CISA (Certified Information Systems Auditor) as highly preferred, in addition to CIA, CRISC, or CISSP.Job Specific Technical Skills:IT audit frameworks (COBIT, ISO 27001, NIST)ERP systems controls (Oracle, SAP)Data analysis tools (ACL, IDEA, Excel advanced)Understanding of cloud environments (Oracle Cloud, AWS, Azure)Knowledge of cybersecurity controls and risk assessmentStrong analytical, reporting, and documentation skills