Assistant Manager - Internal Audit IT

Lulu Group; Abu Dhabi; On-site; AED 80,000 - 110,000; Full time

Job summary

Lulu Group seeks an experienced internal auditor to plan and execute field audits, assess risks, and strengthen internal controls across business units in Abu Dhabi. You will document procedures, findings, and evidence, and draft clear audit observations and reports for management.

The role emphasizes independence, professional skepticism, and collaboration with process owners to implement recommended improvements and ensure timely audit deliverables.

Qualifications

• 1–3 years of relevant audit experience.
• Certifications: CISA, Lead Auditor ISO 27001 or equivalent (nice to have).
• Big 4 or equivalent background is desirable.
• Knowledge of ERP systems (SAP) and data analytics is advantageous.

Responsibilities

• Plan and perform field audit work in line with approved audit programs.
• Assess business risks and evaluate the effectiveness of internal controls.
• Prepare working papers documenting procedures, findings, and evidence.
• Draft audit observations, recommendations, and reports based on findings.

Skills

Internal audit methodologies

Risk assessment

Regulatory frameworks

Stakeholder management

Audit documentation

Professional skepticism

Attention to detail

Continuous learning

Multi-location audits

Education

CISA

Lead Auditor ISO 27001

Tools

SAP

Data analytics tools

COBIT

ITIL

NIST cybersecurity framework

Job description

Role amp responsibilities

• Plan and perform field audit work in line with approved audit programs
• Assess business risks and evaluate the effectiveness of internal controls
• Prepare detailed working papers documenting audit procedures findings and evidence
• Draft audit observations recommendations and reports based on audit findings
• Discuss audit findings with process owners and management to obtain responses
• Ensure audit reports are accurate clear and submitted within the stipulated timelines
• Follow up with process owners to track the implementation of audit recommendations
• Coordinate with business units to gather necessary information and documentation
• Support the preparation of quarterly updates for senior management
• Identify process gaps and suggest improvements to strengthen internal controls
• Maintain proper documentation and evidence to support audit conclusions
• Apply ERP systems e g SAP and data analytics tools to enhance audit testing
• Ensure independence objectivity and professionalism in all audit activities
• Stay updated on regulatory changes audit best practices and industry standards
• Perform IT General Controls ITGC reviews covering User Access Management Privileged Access Management Password Controls Segregation of Duties Change Management Backup and Recovery Incident Management IT Operations
• Conduct application control reviews for SAP and non-SAP applications
• Review cybersecurity controls and information security governance
• Assess third-party vendor risk management and cloud service controls
• Evaluate disaster recovery and business continuity preparedness
• Conduct infrastructure network database and endpoint security reviews

Key Competencies and Skills

Technical Skills Internal audit methodologies and standards IIA Risk assessment and internal control evaluation ERP systems e g SAP and data analytics tools COBIT ITIL NIST cybersecurity framework knowledge Financial operational IT and compliance audits Audit documentation and report preparation Understanding of regulatory frameworks VAT Corporate Tax AML CFT etc as applicable Soft Skills Effective communication verbal and written Problem-solving and critical thinking Collaboration and cross-functional coordination Stakeholder management and relationship building Behavioural Professional integrity and ethical conduct Objectivity and independence in audit work Attention to detail and accuracy Adaptability to multi-location audits and changing priorities Professional skepticism Continuous learning orientation

Minimum 1-3 years of relevant experience Certifications (good to have) : CISA, Lead Auditor ISO 27001 or equivalent Work experience should include Big 4 or equivalent background Thorough understanding of the industry and its segments