Auditor – Internal Audit

Job Description

Job Description

Assist to perform audits in AD Ports Group Information systems, cybersecurity processes and technological records, check the effectiveness of company’s internal control, implement the Annual Audit Plan and conduct risk assessments to provide assurance on the organization compliance with AD Ports Group policies, and applicable standards and regulations.

Responsibilities

Core Responsibilities:

• Assist to conduct technology and information security audits leveraging industry standard risk management frameworks/regulations such as ISO27001, UAE Information Assurance, NIST-800-53, COBIT, COSO, or any other local or international standards.
• Present the results of the audit, highlight significant issues and assess possible solutions to the management.
• Implement the Annual Audit Plan for the technology and information security detailing assignments, timeframes and resources required.
• Initiate Business and IT risk assessments and track recommended risk aversion measures.
• Maintain the Internal Audit charter, manual and procedures in the appropriate files.
• Gather information to prepare reports with regards to audit findings and analysis, budget resulted from assessment, recommendation plans for improvement, and risk mitigation strategies.
• Review, follow up and report the adequacy, effectiveness, and timeliness of actions taken by management on reported observations and recommendations, including those made by external auditors and others.
• Handle AD Ports Group internal controls review process and conduct the required testing to assess its effectiveness.
• Carry out methods for developing technology and information security audit programs (including the sampling techniques) and testing execution templates (substantive testing vs detailed analytical review).
• Assist to develop technology and information security audit programs (including the sampling techniques) and test execution templates using organization Audit methodology and industry standards and risk management frameworks.
  

People Management Responsibilites:

• N/A
  

Strategic Responsibilities:

• N/A
  

Qualifications

• Bachelor’s degree in Accounting, Finance, Information Systems or a related field. Master’s degree is a plus
• Professional Qualification in Internal Auditing and Accounting
• Certified Internal Auditor (CIA), Certified Public Accounting (CPA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Cloud Security, ISO27001 or equivalent.
  

Good knowledge of:

• IT controls including IT general controls, IT application controls, system generated reports and others.
• Information systems security
• Auditing standards, procedures, laws, rules, and regulations
• Experience in executing technology and information security audits.
  

Experience in one or more risk management frameworks/regulations