Associate, IT Application Audit (Qatarization)

About the role

QNB is hiring an Associate for the IT Application Audit portfolio within its Group Internal Audit Function in Doha, Qatar. The role provides independent assurance on controls over technology risks, cybersecurity threats, data governance and digital transformation initiatives, and supports the use of data analytics and continuous auditing. It requires full compliance with the GIAD Group Audit Manual, IIA standards and local regulations.

Key responsibilities

• Contribute to the risk-based annual plan and help safeguard IT assets, data and systems that underpin financial operations.
• Identify significant IT and cybersecurity risks and assess the efficiency of IT investments and processes.
• Build strong, independent relationships with business and support units, communicate technical findings clearly to senior stakeholders, and advise on IT governance and information security.
• Act as a team member on IT application audits covering infrastructure, applications, data management, network security, access controls, incident response and business continuity, following the GIAD Audit Manual, IIA IPPF and ISACA IT audit standards.
• Support the team leader through planning (risk assessments, scope definition), fieldwork (testing, progress updates), reporting (drafting issues and recommendations) and follow-up (issue closure validation, escalation of delays).
• Assess information security frameworks such as ISO 27001, NIST and COBIT, and report control weaknesses and cybersecurity vulnerabilities.
• Integrate data analytics and continuous auditing into the audit practice and stay current on IT trends and cyber threats.