Job Summary

Responsible for leading and managing IT audit engagements to ensure effective risk management, regulatory compliance, and alignment with IT governance and best practices. The role includes supervising audit activities across IT systems, infrastructure, and ERP platforms (SAP, Oracle), while supporting audit planning and stakeholder management.

Key Responsibilities

• Lead the development and maintenance of the IT Audit Universe and process flows
• Plan and design risk-based IT audit programs covering technical and compliance areas
• Manage audit scope, timelines, and coordinate with auditees and stakeholders
• Supervise and lead audit fieldwork, ensuring quality and completeness of audit evidence
• Identify control gaps, assess risk impact, and provide practical recommendations

• 
  Review and evaluate IT General Controls (ITGC) :

  • User access & privilege controls
  • IT asset management
  • IT operations & change management
  • Backup & Business Continuity Plan (BCP)
  • Cybersecurity and malware protection

• 
  Conduct and oversee technical audits across:

  • ERP & Applications (SAP / Oracle)
  • Network and security controls
  • Operating systems (Windows / Linux)
  • Databases (SQL Server and others)
  • Virtualization and data center controls
• Benchmark controls against standards and frameworks (e.g., COBIT, ISO, IT best practices)
• Review audit working papers and reports prepared by team members
• Present audit findings to management and monitor corrective action plans
• Support audit KPIs, continuous improvement initiatives, and special projects
• Coach and provide guidance to junior auditors

Qualifications

• Bachelor’s or Master’s degree in IT, Accounting, or related fields
• Minimum 5 years’ experience in IT Audit / IT Risk / IT Compliance
• Experience in leading audit engagements or supervising team members
• Strong technical knowledge in Windows, Active Directory, SQL Server, Linux, and virtualization
• Hands-on experience auditing SAP and other ERP systems
• Strong analytical, reporting, and stakeholder communication skills
• Good command of English
• Proficient in Microsoft Office (Excel, PowerPoint, Word)