Senior Information Technology Auditor

About the role

Our client, a leading financial market institution in Qatar, is modernising its technology landscape and needs a seasoned IT audit professional to provide independent assurance across its digital ecosystem. The Senior Information Technology Auditor will lead risk‑based audit engagements, evaluate governance frameworks and support the transformation agenda.

Key responsibilities

• Lead and execute risk‑based IT audit engagements in line with the annual audit plan.
• Assess IT governance frameworks, IT strategy, technology risk management and operating models.
• Evaluate cybersecurity governance, security monitoring, vulnerability management, penetration testing and cyber‑resilience controls.
• Review information security controls including identity and access management, privileged access, data encryption and incident management.
• Assess IT General Controls such as logical access, change management, backup and recovery, operations and incident handling.
• Audit core business platforms, supporting applications and associated system interfaces.
• Evaluate cloud computing environments, outsourced IT services and third‑party technology risks.
• Review data governance, data quality, privacy, protection and records‑management frameworks.
• Assess business continuity management and disaster‑recovery capabilities.
• Conduct pre‑implementation and post‑implementation reviews of major technology projects and digital transformation initiatives.
• Perform data analytics and continuous auditing activities.

Required profile

• Minimum 96 months (8 years) of experience in IT audit, technology risk management or related fields.
• Proven experience within financial services or similarly regulated environments.
• Strong understanding of IT governance frameworks and regulatory compliance.

Required skills

• Data encryption
• IT Governance
• Technology risk management
• Disaster Recovery
• Regulatory Compliance
• IT Audit
• Data Analytics
• Information Security
• Cloud Technologies
• Identity and Access Management
• Cybersecurity
• Data Governance
• Penetration Testing