IT Auditor

Yasser Haikal Auditing & Accounting; Doha; On-site; QAR 90,000 - 130,000; Full time

Job summary

Yasser Haikal Auditing & Accounting seeks an experienced IT Auditor to join its technology risk and cybersecurity consulting team. The role involves assessing IT controls, evaluating technology risks, reviewing information systems, and delivering recommendations to improve security, governance, and compliance.

The ideal candidate has strong knowledge of IT audit methodologies, cybersecurity controls, regulatory requirements, and communicates effectively with client stakeholders across industries.

Qualifications

• Bachelor's degree in IT, CS, Cybersecurity, Accounting, Auditing, or related field.
• Minimum 3 years of experience in IT audit, technology risk, cybersecurity audit, or consulting.
• Experience conducting IT audits for external clients preferred.

Responsibilities

• Perform IT audits and technology risk assessments for client organizations.
• Evaluate IT general controls (ITGCs) including access, change, backup, and operations controls.
• Review clients' IT infrastructure, applications, databases, and security processes.
• Assess compliance with industry standards and regulatory requirements.
• Identify control gaps, risks, and areas for improvement.
• Prepare detailed audit reports, findings, and remediation recommendations.
• Conduct cybersecurity and information security control reviews.
• Support clients in improving IT governance, risk management, and compliance frameworks.
• Perform follow-up assessments to validate remediation actions.
• Communicate audit findings and recommendations to client management and technical teams.

Skills

IT Audit & Assurance

Technology Risk Assessment

IT General Controls

Cybersecurity Controls Review

Compliance Assessment

Risk Management

Audit Reporting

Client Engagement

Analytical Thinking

Communication Skills

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Accounting, Auditing, or related field

Job description

We are seeking an experienced IT Auditor to join our technology risk and cybersecurity consulting team. The successful candidate will work with clients to assess IT controls, evaluate technology risks, review information systems, and provide recommendations to improve security, governance, and compliance. The role requires strong knowledge of IT audit methodologies, cybersecurity controls, regulatory requirements, and the ability to communicate effectively with client stakeholders.

Key Responsibilities

• Perform IT audits and technology risk assessments for client organizations.
• Evaluate the effectiveness of IT general controls (ITGCs), including access management, change management, backup, and operations controls.
• Review clients' IT infrastructure, applications, databases, and security processes.
• Assess compliance with industry standards and regulatory requirements.
• Identify control gaps, risks, and areas for improvement.
• Prepare detailed audit reports, findings, and remediation recommendations.
• Conduct cybersecurity and information security control reviews.
• Support clients in improving IT governance, risk management, and compliance frameworks.
• Perform follow-up assessments to validate remediation actions.
• Communicate audit findings and recommendations to client management and technical teams.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Accounting, Auditing, or a related field.
• Minimum 3 years of experience in IT audit, technology risk, cybersecurity audit, or consulting.
• Experience in conducting IT audits for external clients is preferred.
• Strong understanding of IT governance frameworks and control standards.
• Knowledge of frameworks such as COBIT, ISO 27001, NIST, and ITIL.
• Understanding of ITGC, access controls, change management, and system operations.
• Strong analytical, reporting, and documentation skills.
• Excellent communication and client management skills.

Preferred Certifications

• CISA (Certified Information Systems Auditor) - Preferred
• CISSP
• CRISC
• ISO 27001 Lead Auditor
• COBIT Certification
• CompTIA Security+

Required Skills

• IT Audit & Assurance
• Technology Risk Assessment
• IT General Controls (ITGC)
• Cybersecurity Controls Review
• Compliance Assessment
• Risk Management
• Audit Reporting
• Client Engagement
• Analytical Thinking
• Communication Skills