Senior Manager of Internal Audit – Technology

Astra Tech Group; Dubai; On-site; AED 300,000 - 520,000; Full time

Job summary

Astra Tech Group is seeking an experienced IT Audit Leader to drive risk-based audits and special projects across technology domains. You will build audit programs, assess IT controls, and report findings to senior management.

The role requires 10–12 years in IT audit, strong fintech/banking knowledge, and familiarity with AI and emerging technologies. Collaboration with risk, cybersecurity, and governance teams is essential.

Qualifications

• Bachelor's or master's degree in computer science, information system management, or related field.
• One or more industry-recognized audit, security, cloud, or emerging technology certifications (e.g. CISA, CISSP, CRISC, CIA, CCSSP, CISM).
• 10-12 years of experience in internal or external IT audit.
• Good understanding of fintech/banking concepts and AI in banking environments.
• Excellent understanding of local laws, regulations, and international frameworks.

Responsibilities

• Lead and manage risk-based IT audits and special projects in line with AstraTech policies and standards.
• Develop and oversee the annual technology audit plan aligned with IT governance and risk strategies.
• Oversee IT risk assessments and audit programs for technology and digital risks.
• Supervise audit team and review workpapers ensuring quality and compliance.
• Draft comprehensive IT audit reports for senior management and Audit Committee.

Skills

IT infrastructure

Networking

Information security

Cyber security

Cloud security

Data privacy

Blockchain/Crypto

Artificial Intelligence

Risk management

Education

Bachelor's or Master's in Computer Science/Information Systems

Job description

Role Summary

Lead and manage the delivery of risk-based IT audits, and special projects, in accordance with AstraTech policies, procedures, global internal audit standards, and applicable regulatory requirements. Provide assurance and identify technology risks. Expectations will also include building effective relationships across teams within the group. Competencies will involve assessment and insights on First and Second-Line’s Risk Management over IT and Cybersecurity controls, Resilience and Business continuity controls, and Emerging Technologies that have been adopted, such as Blockchain and AI.

Responsibilities

Pre-Audit Planning

• Develop and oversee the execution of the annual technology audit plan, ensuring alignment with IT governance, cybersecurity, and organizational risk strategies.
• Conduct IT risk assessments to identify key areas for review and develop comprehensive audit programs tailored to technology and digital risks.
• Lead opening meetings with executive IT management to discuss audit scope, objectives, and timelines for each technology audit engagement.

Audit Execution

• Supervise and guide the technology audit team during the execution of IT audit assignments, ensuring compliance with IT audit standards, frameworks, and methodologies.
• Review and approve IT audit workpapers, ensuring they provide sufficient, factual, reliable, relevant, and useful information to support audit findings.
• Evaluate the effectiveness of IT controls, IT infrastructure, Cloud environments, cybersecurity measures, data privacy compliance, and IT governance, providing recommendations for improvement.
• Oversee the documentation of IT-related issues raised, management responses, and ensure the accurate reflection of these in audit reports.

Post-Audit Activities

• Lead the drafting of comprehensive IT audit reports, summarizing key findings, technology risks, and recommendations for senior management and the Audit and Risk Committee.
• Ensure timely follow-up on IT audit recommendations and validate the implementation of corrective actions by management.

Communication and Coordination

• Develop and manage relationships with senior management, colleagues and relevant external parties to discuss current and future issues and ensure their requirements and concerns are addressed.
• Coordinate with IT risk management, cybersecurity teams, and other risk assurance functions to ensure a cohesive approach to IT governance, risk, and compliance.
• Communicate IT audit progress, results, and insights to key stakeholders, ensuring transparency and alignment with technology risk management objectives.

Compliance and Professional Standards

• Coordinate with IT risk management, cybersecurity teams, and other assurance functions to ensure a cohesive approach to IT governance, risk, and compliance.
• Communicate IT audit progress, results, and insights to key stakeholders, ensuring transparency and alignment with technology risk management objectives.
• Ensure compliance with the group’s policies, procedures and guidelines together with all relevant regulatory and statutory requirements to protect the Bank’s business at all times

Requirements

• Bachelor’s or master’s degree in computer science, Information System Management, or other related fields.

Professional Certificates

• One or more industry recognized audit, security, cloud, emerging technology professional certifications (e.g. CISA, CISSP, CRISC, CIA, CCSSP, CISM).

Experience

• At least 10-12 years of experience in internal or external audit (IT Audit).
• Good understanding of fintech/ banking concepts, products and procedures.
• Good understanding of AI and ideally practical experience in fintech/ banking environment.
• Excellent understanding of local laws, regulations, international frameworks, and best practices.

Technical Skills & Competencies

• Technical (specialist knowledge of IT infrastructure, Networking, Information security, Cyber security, Cloud security, Data privacy and Data Security, Blockchain/Crypto currency, Artificial Intelligence and Risk management).
• Management & Leadership (negotiation & influencing, thought leadership, project management, department & team management, skills gap identification, junior staff motivation and development).
• Interpersonal (oral & written communication, relationship development & management, organization & time-management, adaptability & multi-tasking).