Manager Internal Audit - Information Technology

Dubai Holding; Dubai; On-site; AED 350,000 - 650,000; Full time

Job summary

Dubai Holding is seeking a Manager - Internal Audit, Information Technology to provide independent assurance over technology governance, risk management, and internal controls across the group. You will lead IT audit engagements, assess ITGCs and cyber controls, and deliver clear findings and practical recommendations.

You will partner with management to implement risk-based corrective actions while staying current with industry standards and evolving cyber threats.

Qualifications

• Bachelor’s degree in IT or related field; CISA preferred.
• Minimum 6–8 years of IT audit or information security assurance experience.
• Experience in international, multi-entity environments; Big 4 preferred.

Responsibilities

• Lead enterprise IT risk assessments and align with group priorities.
• Develop and maintain the technology audit plan and scope.
• Plan and execute IT audit engagements covering governance, information security, and controls.
• Evaluate IT general controls and application controls; report findings with recommendations.
• Engage with management and stakeholders; track remediation and assist with audits.

Skills

IT audit

Technology risk

Information security

Regulatory compliance

NESA awareness

Education

Bachelor’s degree in IT / CS / IS

CISA

CISM

Tools

TeamMate+

AuditBoard

SQL basics

Job description

Established in 2004, Dubai Holding is a global investment company with investments in more than 34 countries and a combined workforce of nearly 45,000 individuals. In line with the vision of Dubai’s leadership and economic diversification strategy, Dubai Holding companies have nurtured sectors, irrevocably transforming Dubai’s socio-economic landscape and positioning Dubai as a diversified, globally integrated economy.

Dubai Holding is committed to the diversification of Dubai’s non-oil economy. Our portfolio, valued at over AED 280+ billion, spans 10 sectors, including real estate, hospitality, leisure & entertainment, ICT, design, education, media, retail, manufacturing & logistics, and science.

For the Good of Tomorrow

Dubai Holding is currently seeking a Manager - Internal Audit, Information Technology, reporting to the Associate Director - Technology Audit. You will be responsible for providing independent and objective assurance over the effectiveness of technology-related governance, risk management, and internal control frameworks across Dubai Holding. The role focuses on evaluating IT systems, infrastructure, cybersecurity, and technology-enabled business processes to ensure that risks are appropriately identified, managed, and mitigated.

The role supports the execution of the Group’s risk-based Internal Audit plan in line with the Group-wide Audit Manual and the International Standards for the Professional Practice of Internal Auditing, while delivering clear, practical, and value-adding insights to management and key stakeholders.

Key Accountabilities

• Contribute to the enterprise-wide IT risk assessment to identify key technology and cyber risk exposures across the Group.
• Support the development and maintenance of the risk-based Technology Audit plan, ensuring alignment with enterprise risk priorities and emerging technology risks.
• Perform preliminary risk analysis and scoping for audit engagements, including understanding business context, technology architecture, and key control environments.

Technology Audit Execution

• Plan and execute IT audit engagements in accordance with approved audit plans, covering areas such as IT governance and management practices, information security and cybersecurity controls, application and infrastructure controls, and technology-enabled business processes.
• Evaluate the design and operating effectiveness of IT general controls (ITGCs), automated application controls, and supporting manual controls.
• Identify control deficiencies, root causes, and risk implications, applying sound professional judgement and internal audit methodologies.

Reporting & Issue Management

• Prepare clear, concise, and well-evidenced audit reports that articulate findings, risks, and practical recommendations.
• Engage constructively with management to agree appropriate, risk-responsive corrective action plans.
• Track and follow up on the implementation of agreed audit actions, escalating overdue or high-risk issues in accordance with Internal Audit protocols.

Stakeholder Engagement & Advisory

• Build effective working relationships with technology and business stakeholders to facilitate efficient audit delivery and constructive outcomes.
• Act as a trusted Internal Audit partner by providing insight on technology risks, control design, and good practice, without assuming management responsibility.
• Support Internal Audit leadership in responding to ad-hoc requests, regulatory reviews, and coordination with external audit or assurance providers.

Continuous Improvement & Professional Development

• Stay current on emerging technology risks, cybersecurity trends, regulatory developments, and industry best practices relevant to IT auditing.
• Contribute to the continuous improvement of Internal Audit methodologies, tools, and templates related to technology and cyber assurance.
• Share knowledge and insights within the Internal Audit function to strengthen overall capability.

Who We Are Looking For

• 6–8 years of progressive experience in IT audit, technology risk, or information security assurance.
• Experience in a Big 4 firm or large internal audit function within a complex, multi-entity organisation is preferred.
• Experience of working in an international capacity and a solid understanding of cultural and market differences (especially those of the Middle East and Asia).

Education/ Professional Certification

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, or a related field.
• Professional certifications: CISA (required); CISM, CRISC, CIA, or ISO 27001 Lead Auditor (advantageous).
• Technology audit delivery, including planning, fieldwork and reporting (IIA Standards and Internal Audit methodology).
• IT governance, risk and control assessment (ITGCs and application controls; COBIT).
• Information security and cyber assurance (secure architecture, security testing; ISO 27001 / NIST CSF).
• Cloud and enterprise platforms exposure (cloud administration; ERP environments).
• Audit analytics and clear technical writing (data analysis, documentation, stakeholder-ready reporting).
• Audit management software proficiency (e.g., TeamMate+, AuditBoard, or equivalent) for planning, workpapers, reporting and issue tracking.
• Project management and Agile ways of working awareness (e.g., SDLC delivery models, change management and governance).
• Practical data analysis skills to support audit scoping and testing (e.g., Excel, SQL basics, and/or BI tools).
• Awareness of UAE regulatory requirements impacting technology and information security (e.g., NESA, data protection).
• Strong analytical and critical thinking skills
• Clear and structured written and verbal communication
• Professional integrity and objectivity
• Ability to manage multiple engagements and competing priorities
• Collaborative and relationship-oriented approach

As much as we would be delighted to entertain all applicants, due to high volumes of applications only successful applicants will be contacted within 14 business days.

This job description is not all inclusive. Dubai Holding reserves the right to amend this job description at any time. Dubai Holding is an Equal Opportunity Employer, committed to a diverse and inclusive work environment.