Information Technology Auditor

Mowasalat Qatar; Doha; On-site; QAR 180,000 - 240,000; Full time

Job summary

Mowasalat Qatar seeks an IT Auditor to strengthen IT governance and risk management across our information systems. You will plan and execute IT audits, assess controls, and ensure compliance with regulatory and company policies while delivering actionable improvements.

The role focuses on identifying IT risks, communicating findings to stakeholders, and supporting continuous improvement of our IT risk management framework in a transportation environment.

Qualifications

• Bachelor’s degree or equivalent in Computer Science/IS/IT with preferred IT audit certs.
• Minimum 3 years in IT auditing or IT risk management.
• Ideal experience in transportation sector or similar reputable org.
• Certifications such as CISA, CISSP or CIA preferred.

Responsibilities

• Plan and execute IT audit assignments including risk assessments and reporting.
• Evaluate IT systems, applications and infrastructure for regulatory compliance.
• Assess IT governance, policies and procedures alignment with objectives.
• Identify IT risks and provide actionable remediation recommendations.
• Prepare and present audit findings and track follow-up actions.

Skills

Power BI

Data analytics

ITGCs

SAP ERP

Audit report writing

Cybersecurity auditing

Risk assessment

Education

Bachelor’s degree in CS/IT/IS

CISA/CISSP/CIA certification

Tools

ACL Analytics

Job description

Job Summary

The IT Auditor plays a critical role in supporting Mowasalat’s vision of delivering agile, safe, and sustainable transport solutions by providing independent and objective assurance on the effectiveness of IT risk management, governance, and control processes. The role is responsible for planning and executing IT audits, evaluating IT systems and controls, assessing compliance with regulatory and organizational requirements, identifying risks, and providing recommendations for improvement. The position contributes to strengthening IT governance, enhancing risk management practices, and ensuring the effectiveness, security, and reliability of Mowasalat’s information technology environment.

Key Responsibilities:

IT Audit Planning & Execution

• Plan and execute IT audit assignments, including risk assessments, audit procedures, and reporting activities.
• Develop an understanding of audited activities, including associated IT risks and controls.
• Identify and assess IT audit risks and recommend strategies to mitigate identified risks.

IT Systems & Controls Evaluation

• Evaluate IT systems, applications, and infrastructure to ensure compliance with regulatory requirements and company policies.
• Assess the design and effectiveness of IT controls across infrastructure, applications, and data security environments.
• Identify audit findings and provide recommendations for process and control improvements.

IT Governance & Compliance

• Review IT governance frameworks, strategies, policies, and procedures to ensure alignment with organisational objectives.
• Assess compliance with regulatory requirements, industry standards, and internal policies.
• Identify governance and compliance gaps and recommend corrective actions and remediation plans.

IT Risk Management

• Support the development and maintenance of IT risk management plans, risk assessments, and mitigation strategies.
• Monitor and evaluate IT risk management controls and processes to ensure effective risk mitigation.
• Identify operational, compliance, and security-related IT risks and contribute to risk reduction initiatives.

Reporting & Follow-Up

• Prepare and present IT audit reports, including executive summaries, findings, conclusions, and recommendations.
• Track and follow up on audit findings to ensure recommendations are implemented and sustained.
• Communicate audit outcomes effectively to management and stakeholders to drive improvements in governance and control processes.

Governance, Confidentiality & Continuous Improvement

• Ensure the highest standards of confidentiality and protection of sensitive organisational information.
• Contribute to continuous enhancement of IT governance, risk management, and internal control frameworks.

Qualifications & Requirements:

Education

• Bachelor’s degree or equivalent in Computer Science / Information Technology & Information Systems, or an accredited IT/IS Audit certification such as CISA, CISSP, or ACDA is preferred.

Experience

• Minimum 3 years of experience in IT auditing, IT risk management, or a related field.
• Experience within the transportation sector or a highly reputed organisation in a similar or equivalent role is preferred.

Certifications & Training (Preferred)

• Certified Information Systems Auditor (CISA).
• Certified Information Systems Security Professional (CISSP).
• Certified Internal Auditor (CIA).

Skills & Competencies

• Hands-on experience with Microsoft Power BI.
• Data analytics experience, preferably with scripting tools such as ACL Analytics or similar software.
• Experience auditing IT General Controls (ITGCs), Application Controls, and IT Frameworks.
• Working knowledge of SAP ERP systems.
• Strong audit report writing and documentation skills.
• Cybersecurity auditing, risk management, or security assessment experience.