The Technology & Cyber Security Audit Manager leads and executes audits within the technology and cybersecurity domains specifically for a fully cloudagnostic environment with advanced cyber defence and DevOps capabilities. This role ensures compliance with regulatory requirements and internal standards by reviewing technology and information security governance architectures, processes, third-party relationships and infrastructures.
Key Responsibilities
- Audit Planning and scheduling: execute and monitor audits within assigned domains ensuring alignment with approved audit plans and timelines; conduct audit work in accordance with internal audit standards, regulatory requirements, and international frameworks such as ISO, PCI DSS, NESA, SWIFT, CSP, SOC2, and CCSS.
- Audit Reporting and Monitoring: produce comprehensive audit reports detailing findings, associated risks, and actionable recommendations; monitor and follow up on the closure of previously raised audit findings to ensure timely resolution; provide regular updates to the Head of Technology & Cybersecurity Audit and other stakeholders on audit progress and corrective measures.
- Continuous Auditing and Ad-hoc Reviews: support other business audits by performing data extraction and analytics; facilitate continuous auditing by implementing innovative data‑driven methodologies; participate in investigations, special reviews or other related assignments as directed by the Head of Technology & Cybersecurity Audit and Chief Audit Executive.
- Audit Methodology and Process Improvement: continuously refine audit methodologies, tools and processes to enhance efficiency and effectiveness; ensure alignment of audit practices with emerging technologies, trends and industry best practices.
- Collaboration and Stakeholder Management: maintain effective working relationships with business units and key stakeholders to foster cooperation and alignment; act as the subject matter expert for technology and data analytics requirements within the Internal Audit Department; periodically review information technology and security architectures to ensure compliance with internal policies and regulatory standards.
- Vendor Risk Management and Business Continuity: periodically assess contracts and service level agreements (SLAs) with third‑party service providers to ensure adherence to agreed‑upon terms; coordinate with outsourced staff to ensure quality and consistency in audit assignments; review the effectiveness of Business Continuity Planning (BCP) and Disaster Recovery (DR) processes, identifying areas for improvement and compliance gaps.
Key Skills
- Expertise in core technology infrastructure, network and security operations.
- Familiarity with emerging technologies and trends in cybersecurity, cloud environments and software development practices including DevOps and CI/CD pipelines.
- Strong understanding of technology platforms, risk management and control frameworks to ensure comprehensive evaluation and compliance.
- Proficiency in auditing smart contracts, decentralized applications (dApps) and blockchain infrastructure and integrations.
- Knowledge of blockchain distributed ledger technologies and industry standards and best practices for digital assets.
- Familiarity with containerization and virtualization technologies (e.g., Docker, Kubernetes, VMware).
- Solid understanding of operating system platforms (e.g., Windows, Linux, Unix) and database management systems (SQL Server, Oracle, MongoDB, etc.).
- In‑depth knowledge of various banking applications and their integration with delivery channels for seamless and secure operations.
- Analytical skills to assess technical designs and architectures, identify vulnerabilities and propose effective mitigations.
- Proficiency in cloud computing and understanding of security standards specific to cloud environments (e.g., SaaS, PaaS, IaaS).
- Experience in security testing including firewalls, security architectures and OWASP guidelines.
- Hands‑on experience with audit management software and tools to streamline audit processes.
- Strong scripting knowledge (e.g., Python, Perl) to support automation and data analysis initiatives.
- Proficient in data analytical skills, including the ability to write and execute SQL queries for data extraction, manipulation and analysis.
Required Qualifications & Experience
- 5-10 years of experience in Information Technology, IT Audit or Cyber Security, preferably within the financial sector in the Middle East.
- A Bachelor’s or Master’s degree in Computer Science or Information Systems.
- Professional certifications (choose one or more): CISA, CISSP, COBIT/ITIL, PCI DSS, ISO 27001, CCSK/CCSP, GSEC/CGIH, CDPSE/CIPM.
Remote Work
No
Employment Type
Fulltime