IT Risk and Internal Audit Manager

About the role

You will lead and execute IT‑focused internal audit engagements across PIH’s Group technology environment, covering IT general controls, cybersecurity, ERP systems, data integrity and emerging technology risks. You will also supervise the Senior IT Auditor and collaborate with the broader internal audit team to embed an IT audit perspective into operational and financial audits.

Key responsibilities

• Plan and lead IT audit engagements, including ITGCs, application controls, cybersecurity, access, change and business continuity.
• Conduct ERP‑focused audit work on SAP modules (Finance, Procurement, HR), covering access controls, segregation of duties, master data governance and system configuration.
• Assess IT risks across key business systems, infrastructure and data environments and translate findings for non‑technical stakeholders.
• Develop and execute IT‑specific Risk Control Matrices, distinguishing design and operating effectiveness.
• Integrate data analytics and continuous monitoring into the audit function, using automated testing and exception reporting.
• Draft and review IT audit reports with accurate, risk‑rated findings and practical remediation recommendations.
• Manage the full finding lifecycle from identification to remediation closure.
• Supervise, coach and review the work of the Senior IT Auditor.
• Contribute to annual risk‑based audit planning and advise on technology risk across the audit universe.
• Liaise with IT, Information Security and business owners to coordinate audit activities and validate findings.

Required profile

• Bachelor’s degree in IT, Information Systems, Computer Science or related field.
• Professional certification (CISA, CRISC, CISSP) required or near completion.
• 7–9 years of IT audit experience, including at least 2 years in a supervisory or managerial role.
• Strong stakeholder management and ability to communicate risk findings to senior management and audit committees.
• Willingness to be based in or relocate to Doha, Qatar.

Required skills

• Hands‑on experience with SAP audit (FI/CO, MM, HCM) – access controls, segregation of duties and application control reviews.
• Knowledge of IT general control frameworks such as COBIT, ISO 27001 and NIST.
• Proficiency with data‑analytics tools like ACL/Galvanize, IDEA, Power BI and SQL.