Senior IT Auditor

Tawteen; Muscat; On-site; OMR 70,000 - 100,000; Full time

Job summary

Tawteen seeks an IT Senior Auditor to lead and manage complex IT audit engagements, providing independent assurance over IT governance, cybersecurity, enterprise applications, cloud technologies, IT infrastructure, and information systems.

The role involves planning risk-based audits, developing programs, leading fieldwork, evaluating IT controls, applying data analytics, and delivering high-quality reports with actionable recommendations to senior management.

Qualifications

• Degree in information technology, information systems, computer science or cybersecurity.
• Certifications such as CISA, CIA or CISM are desirable.
• Data analytics or audit analytics credentials are a plus.
• Minimum 5 years of IT audit, IT risk management, or information security experience.

Responsibilities

• Lead and manage IT audit engagements including ITGC, cybersecurity, cloud, and enterprise applications.
• Develop risk-based audit plans, audit programs, and testing strategies.
• Oversee fieldwork, collect evidence, and ensure IPPF compliance.
• Evaluate IT controls and report findings with practical recommendations.
• Apply data analytics to identify trends and control weaknesses.
• Present findings to process owners and senior management and monitor corrective actions.
• Contribute to continuous improvement of audit methodologies and tools.

Education

Bachelor's degree in information technology, Information Systems, Computer Science or Cybersecurity

CISA

CIA

CISM

Data Analytics or Audit Analytics certification

Job description

Job Contents:

To lead and manage complex Information Technology audit engagements by providing independent and objective assurance over IT governance, cybersecurity, enterprise applications, cloud technologies, IT infrastructure, and information systems. The IT Senior Auditor plans and executes risk-based audits, provides advisory support to management, and strengthens the organization's IT governance, risk management, and internal control framework.

Description :

Lead and manage complex IT audit engagements covering IT General Controls (ITGC), cybersecurity, enterprise applications, cloud environments, IT infrastructure, and emerging technologies in accordance with the approved Annual Internal Audit Plan.

Develop risk-based audit plans, audit programs, control matrices, and testing strategies to assess the effectiveness of IT governance, risk management, and internal controls.

Perform risk assessments to identify key technology risks and determine audit scope, objectives, and priorities.

Lead audit fieldwork, review audit evidence and working papers, and ensure compliance with Internal Audit methodology, quality standards, and the International Professional Practices Framework (IPPF).

Evaluate the design and operating effectiveness of IT controls, identifying control deficiencies, emerging risks, and opportunities for operational improvement.

Apply data analytics and technology-enabled audit techniques to identify trends, anomalies, control weaknesses, and areas requiring management attention.

Ensure audit engagements are delivered within approved budgets, timelines, and quality standards while achieving Internal Audit KPIs.

Prepare and review high-quality audit reports that clearly communicate observations, root causes, risk implications, and practical recommendations.

Present audit findings and recommendations to process owners, department management, and senior management, facilitating agreement on corrective action plans.

Monitor and validate the implementation of agreed management actions, ensuring timely closure of audit observations through the approved follow-up process.

Provide independent advisory support on IT governance, cybersecurity, digital transformation initiatives, system implementations, and technology related risks while maintaining auditor independence.

Contribute to the continuous improvement of Internal Audit methodologies, audit tools, data analytics capabilities, and quality assurance processes.

Build and maintain effective working relationships with management and stakeholders to strengthen governance, risk management, and internal control practices across the organization.

Maintain professional competence through continuous learning and ensure compliance with company policies, Internal Audit Standards, the IPPF, and applicable regulatory requirements.

Perform any other duties assigned by Internal Audit Management in support of departmental and organizational objectives.

Other requirements :

Maintain professional competence through continuous learning and demonstrate knowledge of the Company's Integrated Management System (IMS), including ISO 55001, ISO 14001, OHSAS 18001/ISO 45001, and ISO 27001 requirements, to effectively perform assigned duties in accordance with the roles and responsibilities matrix, while complying with company policies and undertaking additional responsibilities as assigned.

Desired Candidate Profile

Qualifications:

Bachelor s degree in information technology, Information Systems, Computer Science, Cybersecurity or related discipline

One or more of the following: Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA) Certified Information Security Manager (CISM) Data Analytics or Audit Analytics certification is desirable.

Experience :

Minimum 5 years of experience in IT Audit, IT Risk Management, Information Security or Technology Governance.