Manager - IT Audits UAEN Talent

Overview

• An Associate IT Audit Manager plays a crucial role in ensuring that an organization’s information technology systems and processes align with its objectives while meeting regulatory compliance and safeguarding against risks. The key responsibilities include:
• Planning and Designing Audits:
• Develop comprehensive audit plans that outline the scope, objectives, and methodologies for evaluating the effectiveness, efficiency, and security of IT systems and processes.
• Risk Assessment:
• Conduct risk assessments to identify vulnerabilities in the IT infrastructure, including cybersecurity threats, data integrity issues, and system availability risks.
• Based on these assessments, prioritize areas for auditing.
• Performing Audits:
• Execute audits according to the planned scope, including reviewing and testing IT controls, systems, and processes to assess their effectiveness.
• This often involves evaluating IT governance practices, security policies, access controls, disaster recovery planning, and operational procedures.
• Reporting Findings:
• Document audit results, including identified weaknesses or non-compliance issues.
• Provide clear, actionable recommendations for addressing these issues.
• Follow-up and Verification:
• Follow up on audit findings to ensure that corrective actions have been implemented effectively.
• Verify that recommendations are carried out and that the desired outcomes are achieved.
• Advisory Role:
• Act as an advisor to management on IT risk management, control, and governance processes.
• Offer guidance on enhancing IT frameworks, policies, and procedures.
• Regulatory Compliance:
• Evaluate the organization’s compliance with relevant industry standards and regulatory requirements related to IT, such as GDPR, ISO27001, ISR, SOX, HIPAA.
• Collaboration and Communication:
• Work closely with IT teams, external auditors, and other stakeholders.
• Effectively communicating audit findings, risks, and recommendations to both technical and non-technical audiences.