Manager Internal Audit - Information Technology

About the role

Dubai Holding, a global investment company established in 2004, is seeking a Manager Internal Audit, Information Technology, reporting to the Associate Director - Technology Audit. The role provides independent assurance over the effectiveness of technology-related governance, risk management and internal control frameworks, evaluating IT systems, infrastructure, cybersecurity and technology-enabled business processes. It supports the Group's risk-based Internal Audit plan in line with the Group-wide Audit Manual and the International Standards for the Professional Practice of Internal Auditing.

Key responsibilities

• Contribute to the enterprise-wide IT risk assessment and support the risk-based Technology Audit plan
• Perform preliminary risk analysis and scoping for audit engagements
• Execute IT audits covering IT governance, information security and cybersecurity controls, application and infrastructure controls, and technology-enabled business processes
• Evaluate the design and operating effectiveness of IT general controls, automated application controls and manual controls
• Prepare clear, evidence-based audit reports and track corrective actions with management
• Engage with technology and business stakeholders and advise on technology risks and control design
• Support responses to ad-hoc requests, regulatory reviews and coordination with external auditors
• Stay current on technology risks, cybersecurity trends and regulatory developments, and improve audit methodologies and templates

Required profile

• 6-8 years of progressive experience in IT audit, technology risk or information security assurance
• Experience in a Big 4 firm or large internal audit function in a complex, multi-entity organisation is preferred
• Bachelor's degree in Information Technology, Computer Science, Information Systems or a related field
• CISA certification required; CISM, CRISC, CIA or ISO 27001 Lead Auditor advantageous
• International experience and understanding of cultural and market differences, especially in the Middle East and Asia

Required skills

• Technology audit delivery, ITGC and application controls assessment (COBIT)
• Information security and cyber assurance (ISO 27001 / NIST CSF)
• Audit management software such as TeamMate+ or AuditBoard
• Data analysis and technical writing (Excel, SQL basics, BI tools)
• Awareness of UAE regulatory requirements such as NESA and data protection