Senior IT Auditor - GRC & ISO 27001 Lead

Talent Higher; Dubai; On-site; AED 260,000 - 420,000; Full time

Benefits offered by this job

null

Job summary

Talent Higher is seeking a Senior IT Internal Auditor for a Dubai-based client. This individual-contributor role leads IT audits, supports IT GRC initiatives, and strengthens ISO 27001 and DESC ISR alignment.

You will collaborate with IT teams, business stakeholders, external auditors, and vendors to drive governance and compliance across ERP and enterprise applications. The ideal candidate has 4–7 years in IT audit within consultancy or regulated environments, with hands-on ITGC, policy

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Security, Cybersecurity, or a related field.
• 4–7 years of experience in IT Audit, IT Governance, Risk and Compliance, ideally in consultancy.
• Strong hands-on experience auditing ITGCs, application controls, IT risk, compliance and governance.
• Working knowledge of ISO/IEC 27001:2022 and DESC ISR.
• Experience with IT policy development, risk registers, VAPT processes, vendor risk management, BCP and DR controls.
• Ability to work independently in a small team with internal stakeholders, auditors and vendors.
• Experience in government entities or regulated environments preferred.
• Certifications such as CIA, CISA, ISO 27001 Lead Auditor/Lead Implementer, CRISC, or COBIT are advantageous.

Responsibilities

• Conduct risk-based IT audits to assess IT governance, ITGCs, application controls and technology-related internal controls.
• Support Head of Internal Audit in maintaining and improving IT GRC framework.
• Develop and maintain IT policies, standards, SOPs, risk registers, BIA, BCP/DR per ISO 27001:2022 and DESC ISR.
• Evaluate controls across ERP, Zoho, and other enterprise apps including access, backup, incident, DR and BC.
• Coordinate internal and external audits; manage evidence, liaison, corrective actions, and closure of findings.
• Support and track VAPT engagements and retests with IT and security teams.
• Perform risk assessments for new systems, projects, vendors, and third-party engagements.
• Prepare audit reports, dashboards, and board-ready governance documentation.
• Manage vendor/third-party risk docs including SOC reports and SLAs.
• Work independently while coordinating with senior stakeholders, auditors, and vendors.

Skills

IT audit

IT governance

Risk assessment

Compliance

Education

Bachelor's degree in IT/CS/InfoSec

Tools

ISO 27001:2022

DESC ISR

VAPT

SOC reports

Job description

Talent Higher is seeking a Senior IT Internal Auditor for a Dubai-based client. This individual-contributor role leads IT audits, supports IT GRC initiatives, and strengthens ISO 27001 and DESC ISR alignment.

You will collaborate with IT teams, business stakeholders, external auditors, and vendors to drive governance and compliance across ERP and enterprise applications. The ideal candidate has 4–7 years in IT audit within consultancy or regulated environments, with hands-on ITGC, policy