Senior Information Technology Auditor

Talent Higher; Dubai; On-site; AED 260,000 - 420,000; Full time

Benefits offered by this job

null

Job summary

Talent Higher is seeking a Senior IT Internal Auditor for a Dubai-based client. This individual-contributor role leads IT audits, supports IT GRC initiatives, and strengthens ISO 27001 and DESC ISR alignment.

You will collaborate with IT teams, business stakeholders, external auditors, and vendors to drive governance and compliance across ERP and enterprise applications. The ideal candidate has 4–7 years in IT audit within consultancy or regulated environments, with hands-on ITGC, policy

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Security, Cybersecurity, or a related field.
• 4–7 years of experience in IT Audit, IT Governance, Risk and Compliance, ideally in consultancy.
• Strong hands-on experience auditing ITGCs, application controls, IT risk, compliance and governance.
• Working knowledge of ISO/IEC 27001:2022 and DESC ISR.
• Experience with IT policy development, risk registers, VAPT processes, vendor risk management, BCP and DR controls.
• Ability to work independently in a small team with internal stakeholders, auditors and vendors.
• Experience in government entities or regulated environments preferred.
• Certifications such as CIA, CISA, ISO 27001 Lead Auditor/Lead Implementer, CRISC, or COBIT are advantageous.

Responsibilities

• Conduct risk-based IT audits to assess IT governance, ITGCs, application controls and technology-related internal controls.
• Support Head of Internal Audit in maintaining and improving IT GRC framework.
• Develop and maintain IT policies, standards, SOPs, risk registers, BIA, BCP/DR per ISO 27001:2022 and DESC ISR.
• Evaluate controls across ERP, Zoho, and other enterprise apps including access, backup, incident, DR and BC.
• Coordinate internal and external audits; manage evidence, liaison, corrective actions, and closure of findings.
• Support and track VAPT engagements and retests with IT and security teams.
• Perform risk assessments for new systems, projects, vendors, and third-party engagements.
• Prepare audit reports, dashboards, and board-ready governance documentation.
• Manage vendor/third-party risk docs including SOC reports and SLAs.
• Work independently while coordinating with senior stakeholders, auditors, and vendors.

Skills

IT audit

IT governance

Risk assessment

Compliance

Education

Bachelor's degree in IT/CS/InfoSec

Tools

ISO 27001:2022

DESC ISR

VAPT

SOC reports

Job description

We are hiring a Senior IT Internal Auditor for one of our Dubai-based clients.

This is an individual-contributor role within a lean Internal Audit team of four, reporting to the Internal Audit Manager. The successful candidate will independently lead and support IT audit, governance, risk, and compliance initiatives while working closely with IT teams, business stakeholders, external auditors, and vendors. The role will play a key part in strengthening the organisation’s IT GRC framework and ensuring ongoing alignment with ISO 27001 and DESC ISR requirements.

Responsibilities:

• Conduct risk-based IT audits to assess IT governance, IT General Controls (ITGCs), application controls, and technology-related internal controls.
• Support the Head of Internal Audit in maintaining and continuously improving the IT Governance, Risk and Compliance (GRC) framework.
• Develop, review, and maintain IT policies, standards, SOPs, risk registers, Business Impact Assessments, BCP and DR documentation in line with ISO 27001:2022, DESC ISR, and other relevant frameworks.
• Evaluate controls across ERP, Zoho, and other enterprise applications, including access management, backup, incident management, disaster recovery, and business continuity.
• Coordinate internal and external audits, including ISO 27001 surveillance/recertification and DESC ISR audits; manage evidence collection, auditor liaison, corrective actions, and closure of findings.
• Support and track VAPT engagements, remediation actions, and retest cycles in coordination with IT and security teams.
• Conduct risk assessments for new systems, projects, vendors, and third-party engagements.
• Prepare audit reports, compliance dashboards, audit-readiness documentation, and board-ready governance reports for internal stakeholders.
• Manage vendor and third-party risk documentation, including SOC reports, certifications, security requirements, and SLAs.
• Work independently while coordinating confidently with senior internal stakeholders, auditors, and vendors.

Requirements:

• Bachelor’s degree in Information Technology, Computer Science, Information Security, Cybersecurity, or a related field.
• 4–7 years of experience in IT Audit, IT Governance, Risk and Compliance, ideally gained within a consultancy environment.
• Strong hands-on experience conducting IT audits and assessing ITGCs, application controls, IT risk, compliance, and governance frameworks.
• Working knowledge of ISO/IEC 27001:2022 and DESC Information Security Regulation (ISR).
• Experience with IT policy development, risk registers, VAPT processes, vendor risk management, BCP, and DR controls.
• Ability to work independently in a small team while coordinating confidently with internal stakeholders, auditors, and vendors.
• Experience within a government entity, free zone authority, or similarly regulated environment will be highly preferred.
• CIA, CISA, ISO 27001 Lead Auditor/Lead Implementer, CRISC, or COBIT certifications will be advantageous.