Senior Technology Auditor

Role Purpose:

Lead simultaneous complex different assignments of the internal audits, investigations and forensics and advisory activities. These different activities involve leading or conducting different projects into the internal audit, compliance audit, investigations and IT & Technical domain. In addition, the role contributes a significant amount of audit follow-up with the management, coordination with the external auditors, developing the annual internal Audit Plan.

Internal Audit:

Undertake the identification and evaluation of Wataniya Telecom's IT & Technical audit risk relating to business, financial and operational areas and provides significant input to the development of a risk-based annual internal audit plan.

Gather the management requirements through the different meetings with the management for the audit plan including IT & Technical risks.

Participate in the preparation of annual Audit Plan in accordance with the related provisions of the relevant policies and regulations.

Perform Technology audits and review the work performed to ensure the adequacy of audit scope, the adequacy of testing performed, and the accuracy of conclusions reached.

Plan the resources and requirements for the different audit assignments and special assignments.

Monitor the audit assignments progress and escalate any showstoppers to the Manager, IT & Technical Audit for the intervention.

Ensure that audit procedures are strictly adhered to, including identifying and defining issues, developing criteria, reviewing and analysing evidence, and documenting IT & Technical processes and procedures.

Oversee and lead the work of the audit staff in conducting interviews, reviewing documents, developing and administering surveys, composing summary memos, and preparing working papers or audit operations.

Oversee the work of the audit staff in identification, development, and documentation of audit issues and recommendations for improvement. Communicate the results of audit projects via written reports and oral presentations on a timely basis to management and the Board of Directors.

Interact with staff, section heads, department directors and managers and when necessary, with executive management in order to obtain and/or communicate relevant information to achieve the objective/s of the IT & Technical audit.

Maintain all organisational and professional ethical standards and ensure internal audit activities are carried out in compliance with ISACA (Information Systems Audit and Control Association) Information System standards and guidelines.

Plan and execute audits of IT & Technical platforms (Windows, UNIX, , MPLS and OSPF networks) and evaluates IT & Technical internal controls and works collaboratively with management to identify actions needed.

Conduct data extraction, analysis, and security reviews.

Act as liaison with Technology business partners to ensure full understanding of data flow, data integrity and system security.

Assess information technology control elements to mitigate IT & Technical risks regarding the confidentiality, integrity, and availability of business information in compliance with security best practices (Such as ISO

Work independently under general direction with extensive latitude for initiative and independent judgment.

Administrate and support the Audit Management Software to facilitate Internal Audit Activities

Provide consulting services to the organization's management and staff pertaining information security policies and procedures based on best practices ISO 20000;

Formulate the audit programs with appropriate testing mechanisms, execute the audit program, recognize control weaknesses, assess the materiality of these weaknesses, and relate them back to the scope and objectives of the audit.

Consulting:

Lead consulting engagements related to Information and network security, IS governance, Business continuity and disaster recovery based on best practices of each area (ISO 27000, ISO 20000, ITIL and COBIT framework)

Communicate the results of consulting projects via written reports and oral presentations on a timely basis to management and the Board of Directors.

Review of the policies and procedures of the IT & Technology and Technical operations of the Company before being raised for Chief Executive Officer and Board of Directors approval.

Review the ICOFR ITGC done by external audit firm.

Special Assignments and Fraud Investigations :

Lead the Internal Audit team in any fraud investigations and computer forensics assignment or any special audit assignments

External auditors relationship management:

Coordinate with the external auditors and facilitate their fieldwork in the Company.

Managing Staff:

Lead the work of direct reports to ensure they meet their objectives, are kept motivated and perform in accordance with their job description

Conduct regular on the job training to ensure that direct reports have the necessary skills to undertake new or existing responsibilities.

Delegate responsibility to direct reports, in accordance with their role and ability, to ensure they are developed and maximise their potential.

Participate in the selection and interview process for the candidates as well as the assistance in the recruitment of reporting staff as required.

Perform the annual performance appraisal process for the direct reporting staff and ensure objectives set are monitored and take effective actions to address performance matters.

Plan the workload and resources to effectively handle the different assignments in the IT & Technical Audit department.

Other:

Develop and maintain productive team-oriented management and staff relationships through individual contacts and group meetings.

Represent internal audit at Wataniya Telecom project team meetings, at management meetings, and meetings with external organisations.

Pursue professional development opportunities, including external and internal training and professional association memberships, and shares information gained with co-workers.

Proactively take responsibility for self-improvement by staying well-informed of developments, knowledge and innovations in relevant field of expertise.

Other duties as directed by the Manager, IT & Technical Audit.

Necessary knowledge and Experience to be able to do the job:

5 years Minimum experience in IT & Technical internal auditing in the telecom industry or related domain.

Advanced knowledge Information Technology infrastructure for telecommunication companies.

Project management, IS security experience.

Deep knowledge of ISACA Information System standards, guidelines and Code of Ethics.

Knowledge of contemporary risk management and control techniques and working knowledge of contemporary control frameworks.

Working knowledge of control and risk self-assessment facilitation techniques.

Familiarity with the common indicators of fraud.

Effective communication and interpersonal skills.

Report writing and presentation skills for presenting findings and recommendations for improvement.

Ability to operate in a diverse multicultural, multinational work environment, exhibiting appropriate sensitivities.

Fluent verbal and written communication in English.

Education and Certification requirements:

Bachelor's degree in management information systems (MIS), Computer Science, Telecom Engineering or Computer Engineering from a first tier educational institute.

Certification in at least one area (e.g. CISA, CISM, CISSP, and GSNA) is preferred.

Commencement towards post-graduate related field or profession (e.g., IT auditing, fraud auditing and computer forensics) will be viewed favourably.