IT Audit Specialist

xCube; Dubai; On-site; AED 180,000 - 240,000; Full time

Job summary

xCube, a UAE-based fintech, seeks an IT Internal Auditor to strengthen technology assurance for its brokerage platform and trading tech. You will develop automated monitoring, apply data analytics, assess cybersecurity risks, and provide independent assurance over critical systems.

The role covers audits of cybersecurity, infrastructure, networks, applications, databases, cloud, and access management, with a focus on security, availability, resilience, and integrity of systems including mobile

Qualifications

• Bachelor's degree in information technology or cybersecurity or related field.
• Experience or knowledge in cybersecurity, auditing, and data analytics is desired.

Responsibilities

• Develop IT Internal Audit risk assessment and identify key tech risks.
• Support risk-based IT Internal Audit Plan development.
• Audit cybersecurity, infrastructure, networks, apps, databases, cloud, access management, and IT operations.
• Assess vulnerabilities, control weaknesses, security gaps, and technology risks.
• Provide assurance on security, availability, resilience, and integrity of critical systems including mobile app and web platform.
• Review network security, vulnerability management, incident response, database security, DR, and third-party risks.
• Develop continuous auditing and monitoring tools using automation, data analytics, dashboards, scripts, alerts, and reports.
• Communicate findings and follow up on corrective actions with management and Board.
• Assist Head of Internal Audit with technology and cybersecurity assurance to senior management.

Skills

Cybersecurity

Penetration testing

Digital forensics

Incident investigation

Data analytics

Automation

Scripting

Programming

Education

Bachelor's degree in IT / CS / Cybersecurity

Tools

AWS

Azure

Google Cloud

Job description

About the Company xCube is a Fintech company based in the UAE, dedicated to enhancing the competitiveness of Capital Markets in the UAE by introducing the latest financial technologies and innovations to the region.

With its origins as a market maker, xCube has since expanded its scope, utilizing its expertise in Capital Markets to provide a brokerage platform that leverages cutting-edge technologies.

About the Role The IT Internal Auditor be working closely with the Head of Internal Audit, you'll help strengthen our technology assurance capability by developing automated monitoring, applying data analytics, assessing technology and cybersecurity risks, and providing independent assurance over the systems that support our brokerage platform and trading technology.

Responsibilities

• Develop and maintain the IT Internal Audit Risk Assessment and identify key technology and cybersecurity risks.
• Support the development of a risk-based IT Internal Audit Plan.
• Plan and conduct audits covering cybersecurity, infrastructure, networks, applications, databases, cloud, integrations, access management, and IT operations.
• Assess vulnerabilities, control weaknesses, security gaps, and technology risks.
• Provide assurance over the security, availability, resilience, and integrity of critical systems, including xCube's mobile application and web platform.
• Review areas including network security, vulnerability management, incident response, database security, disaster recovery, and third-party technology risks.
• Develop continuous auditing and monitoring tools using automation, data analytics, dashboards, scripts, alerts, and exception reporting.
• Communicate findings and recommendations to management and follow up on agreed corrective actions.
• Support the Head of Internal Audit in providing technology and cybersecurity assurance to senior management and the Board Audit Committee.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Security, Computer Engineering, Information Systems, or a related field.

Required Skills

Strong knowledge or practical experience in several of the following areas:

• Cybersecurity and penetration testing
• Digital forensics and incident investigation
• Data analytics, automation, scripting, or programming

Preferred Skills

Professional certifications are preferred but not mandatory, including:

• CISA, CISSP, CEH, OSCP, Security+, CCNA, CCSP, cloud certifications (AWS/Azure/Google Cloud), digital forensics certifications, or other relevant IT and cybersecurity certifications.

*Suitably qualified Emirati candidates will be given preference. Applications from all qualified candidates are welcome.