Senior IT Internal Auditor

ADIV Human Resources Consultancies, L.L.C; Dubai; On-site; AED 260,000 - 420,000; Full time

Job summary

ADIV Human Resources Consultancies, L.L.C seeks a Senior IT Internal Auditor to support the Head of Internal Audit in strengthening IT governance, risk, compliance and internal controls across IT audits and ISO 27001/DESC ISR compliance.

You will coordinate audits, maintain risk registers, develop IT policies, and prepare board-ready reports. 4–7 years in IT audit with ISO 27001:2022 and DESC ISR experience preferred.

Qualifications

• Bachelor’s degree in IT, Computer Science, Cybersecurity, Information Security, or a related field.
• 4–7 years’ experience in IT audit, IT governance, risk, and compliance.

Responsibilities

• Conduct risk-based IT audits covering ITGCs, application controls, IT operations, ERP/Zoho systems, backup, disaster recovery, and business continuity.
• Develop, review, and maintain IT policies, standards, procedures, and governance documentation aligned with ISO 27001:2022, DESC ISR, BCM.
• Maintain the IT risk register, including risk assessments, treatment plans, residual risks, and remediation tracking.
• Coordinate ISO 27001, DESC ISR, internal, and external audits, including evidence collection and corrective action tracking.
• Coordinate and track VAPT activities, remediation, and retesting.
• Support vendor and third-party risk assessments, including SOC reports and certifications.

Skills

IT governance

IT risk management

Audit management

Stakeholder management

Documentation

Report writing

Policy development

Education

Bachelor’s degree in IT / CS / Cybersecurity

Tools

Microsoft 365

Excel

Word

SharePoint

Job description

My client, is seeking a Senior IT Internal Auditor to support the Head of Internal Audit in strengthening IT governance, risk, compliance, and internal controls. The role will focus on IT audits, ISO 27001 and DESC ISR compliance, IT risk management, third-party risk, VAPT coordination, and audit readiness.

Key Responsibilities

• Conduct risk-based IT audits covering IT General Controls (ITGCs), application controls, IT operations, ERP/Zoho systems, backup, disaster recovery, and business continuity.
• Develop, review, and maintain IT policies, standards, procedures, and governance documentation aligned with ISO 27001:2022, DESC ISR, BCM, and applicable regulatory requirements.
• Maintain the IT risk register, including risk assessments, treatment plans, residual risks, and remediation tracking.
• Support risk assessments for new systems, projects, and third-party engagements.
• Coordinate ISO 27001, DESC ISR, internal, and external audits, including evidence collection, auditor liaison, findings, and corrective action tracking.
• Coordinate and track Vulnerability Assessment and Penetration Testing (VAPT) activities, remediation, and retesting.
• Support vendor and third-party risk assessments, including review of SOC reports, certifications, SLAs, and security documentation.
• Maintain compliance evidence repositories, audit documentation, dashboards, and management reports.
• Support the maintenance and testing of Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP).
• Assist with information security awareness initiatives and compliance training.
• Prepare clear, management- and board-ready audit, risk, and compliance reports.

Qualifications & Experience

• Bachelor’s degree in IT, Computer Science, Cybersecurity, Information Security, or a related field.
• 4–7 years’ experience in IT audit, IT governance, risk, and compliance, preferably within a regulated, government-linked, or free-zone environment.
• Practical knowledge of ISO/IEC 27001:2022 and DESC ISR.
• Experience with ITGCs, IT risk management, VAPT, third-party risk, business continuity, and audit management.
• Strong experience in developing and reviewing IT policies, SOPs, controls, and process documentation.
• Excellent analytical, documentation, report-writing, and stakeholder management skills.
• Proficiency in Microsoft 365, including Excel, Word, and SharePoint.

Preferred Certifications

• CISA
• cia