IT Auditor

OMNIYAT; Dubai; On-site; AED 180,000 - 280,000; Full time

Job summary

OMNIYAT seeks an IT Auditor to provide independent assurance over IT governance, cybersecurity controls and technology systems. You will evaluate IT general controls, application controls and risk management to protect data and digital assets across the organization.

Day-to-day tasks include planning audits, testing controls, assessing cyber posture, reviewing ERP systems, and coordinating with Enterprise Technology and external auditors to ensure effective remediation and timely reporting.

Qualifications

• Bachelor's degree in IT/CS or related field required or equivalent.
• CISA certification mandatory; CISSP or ISO 27001 Lead Auditor an advantage.
• 6+ years IT audit or cybersecurity assurance experience.
• Experience with ITGC, cyber posture assessments and ERP/application controls.

Responsibilities

• Plan, scope and perform ITGC audits across critical systems.
• Assess cyber security posture against NIST CSF and ISO 27001.
• Review ERP and business application controls across key systems.
• Conduct pre/post-go-live reviews for system implementations.
• Coordinate with external IT auditors or subject-matter experts.
• Prepare clear IT audit reports with risk-based remediation recommendations.
• Monitor cyber threats and regulatory developments relevant to IT controls.

Skills

IT audit

Cybersecurity

Data analysis

Education

Bachelor's degree in IT/CS

CISA certification

CISSP or ISO 27001 Lead Auditor (advantage)

Tools

Salesforce

Oracle Fusion

Primavera Unifier

Job description

The IT Auditor provides independent and objective assurance over the design and operating effectiveness of the Group's IT governance framework, cybersecurity controls and technology systems. The role safeguards the confidentiality, integrity and availability of OMNIYAT's data and digital assets by evaluating IT general controls, application controls and cyber risk management practices across the organization. Working closely with the Director – Internal Audit, Enterprise Technology and IT & Digital Security, the IT Auditor identifies control gaps and emerging technology risks and supports the Group's digital transformation agenda by embedding assurance early in system implementations, upgrades and third-party engagements.

Day-to-day Tasks:

1. Plan, scope and perform IT general control (ITGC) audits covering logical access, change management, IT operations and backup/disaster recovery across critical systems
2. Assess the organization’s cyber security posture against recognized frameworks such as NIST CSF and ISO 27001, incorporating UAE PDPL data protection considerations
3. Review and test ERP and business application controls, including automated controls, interfaces and system-generated reports, across key finance and operational systems
4. Conduct pre-implementation and post-go-live reviews for new system implementations, upgrades and major configuration changes to confirm controls are designed and operating effectively
5. Perform integrated audits combining financial, operational and IT risk perspectives, and assess IT third-party/vendor risk including data security and service continuity arrangements
6. Access, extract and analyses data from enterprise systems in coordination with the Audit Analytics & AI Auditor to support risk-based and data-driven audit procedures
7. Track and follow up on the remediation of IT audit findings and recommendations in coordination with Enterprise Technology and IT & Digital Security
8. Support the planning, scoping and execution of the annual risk-based IT audit plan in coordination with the Director – Internal Audit
9. Evaluate the design and operating effectiveness of key IT general controls and application controls, and recommend practical enhancements where deficiencies are identified
10. Coordinate with external IT auditors, forensic specialists or subject-matter experts on co-sourced or specialized engagements where additional expertise is required
11. Prepare clear, well-supported and risk-rated IT audit reports that communicate findings, root causes and practical remediation recommendations to management
12. Monitor emerging cyber security threats, regulatory developments and technology trends relevant to the Group’s digital roadmap and assess their impact on the control environment
13. Participate in the review of information security policies, procedures and standards to confirm alignment with leading practice and regulatory requirements
14. Provide advisory input on IT control design during the early stages of digital transformation projects and technology change initiatives.

Long Term Projects

• Build a structured IT and cyber assurance programme aligned to the Group’s digital roadmap.
• Expand integrated audit coverage as new systems and digital initiatives are rolled out.

Experience & Qualifications

• Bachelor's degree in Information Technology, Computer Science or a related field. CISA is required; CISSP or ISO 27001 Lead Auditor is an advantage.
• 6+ years of IT audit or cybersecurity assurance experience in the industry and/or with Big 4 consulting firm
• ITGC audits: access, change, operations and backup/disaster recovery
• Cyber posture assessment against NIST CSF / ISO 27001, incl. PDPL considerations
• ERP and application controls (Salesforce, Oracle Fusion, Primavera Unifier etc.) review
• Pre- and post-go-live system reviews
• Integrated audits and IT third-party/vendor risk assessment
• Coordination with Enterprise Technology and IT & Digital Security on remediation