Senior Lead Auditor - IT

Power Holding; Qatar; On-site; QAR 180,000 - 260,000; Full time

Job summary

The Senior Lead Auditor - IT at Power International Holding (PIH) leads technology-focused internal audits across the group, assessing IT general controls, SAP security, and data governance to ensure robust risk management and regulatory compliance.

Reporting to the IT Audit Manager, the role involves planning, scoping, fieldwork, reporting, remediation tracking, and continuous improvement of the Group IT audit program, engaging with IT, security, and process owners to implement practical

Qualifications

• Minimum 5 years IT audit or Security/Risk Management experience.
• Hands-on coverage of IT general controls and SAP ERP application controls.
• Strong knowledge of governance, risk, and control frameworks.
• Ability to analyze complex environments and communicate findings.
• Excellent stakeholder communication and report writing.

Responsibilities

• Plan and execute risk-based IT audits covering ITGCs, application controls, cybersecurity, access management, change management, IT operations, business continuity, disaster recovery, and related technology risks across the Group.
• Audit SAP access controls, roles, authorizations, segregation of duties, master data governance, system configuration, interfaces, workflows, and key automated controls.
• Engage with IT, Information Security, data owners, system owners, and business-process owners to validate findings and agree corrective action plans.
• Maintain current knowledge of technology risk, cybersecurity, privacy, SAP controls, regulatory expectations, and emerging audit practices.

Skills

IT audit

Risk management

Analytical thinking

Stakeholder communication

Independent delivery

Education

Bachelor's Degree in Information Technology

Professional Qualification related field

Tools

SAP

Audit tools & techniques

Job description

Select how often (in days) to receive an alert: Create Alert

The Senior Lead Auditor - IT executes technology-focused internal audit engagements across Power International Holding and its business groups, providing independent assurance over the design and operating effectiveness of technology, cybersecurity, data protection, and system-control environments.

Reporting to the IT Audit Manager within the Group Internal Audit function, the role evaluates IT general controls, ERP application controls, SAP security and authorizations, segregation of duties, cybersecurity, access management, change management, business continuity, and data governance. The position applies risk-based audit methodologies, data analytics, and professional standards to identify control weaknesses, determine root causes, and communicate practical recommendations to technical and non-technical stakeholders.

The role works independently across technical and business-process environments while supporting audit planning, scoping, fieldwork, reporting, remediation tracking, and continuous improvement of the Group IT audit plan.

Job Responsibilities 1

IT Audit Planning & Execution

• Execute risk-based IT audit engagements covering IT general controls, application controls, cybersecurity, access management, change management, IT operations, business continuity, disaster recovery, and related technology risks across the Group.

ERP, SAP & Application Controls

• Perform ERP-focused audit work covering SAP access controls, role design, authorizations, segregation of duties, master data governance, system configuration, interfaces, workflows, and key automated controls.
• Identify control gaps, recurring issues, root causes, and risk concentrations requiring management attention.
• Extract, reconcile, and analyze data from key business systems to identify anomalies, unauthorized activity, control exceptions, and compliance breaches.

Audit Reporting & Stakeholder Engagement

• Engage with IT, Information Security, data owners, system owners, and business-process owners to validate findings and agree practical corrective action plans, owners, and target dates.

Remediation, Quality & Knowledge Development

• Maintain current knowledge of technology risk, cybersecurity, privacy, SAP controls, regulatory expectations, and emerging audit practices.

Job Knowledge & Skills

Technology Risk & Control Knowledge:

Strong understanding of IT general controls, application controls, cybersecurity, data protection, privacy, business continuity, and technology governance.

Audit Methodology & Professional Standards:

Working knowledge of risk-based auditing, Risk Control Matrices, design and operating effectiveness testing, IIA GIAS and IPPF, ISACA Standards, and relevant assurance practices.

Analytical Thinking & Professional Judgment:

Ability to assess complex technical and business-process environments, identify root causes, evaluate risk significance, and reach evidence-based conclusions.

Stakeholder Communication & Report Writing:

Strong written and verbal communication skills with the ability to translate technical findings into clear business risk and control language for non-technical audiences.

Independent Delivery & Collaboration:

Ability to manage assigned engagements with limited supervision while collaborating effectively with audit colleagues, IT teams, Information Security, and business-process owners.

Job Experience

Professional Experience: Minimum 5 years of IT audit or Security/Risk Management experience with demonstrated hands-on coverage of IT general controls and SAP ERP application controls.

Agility

AI Fluency

Build High-Performing Teams

Governance, IA and control tools and techniques L3

Leadership_321977503

Provide Direction

Quality_321977507

Resilience

Risk analysis & control assessment techniques L3

Education

Bachelor's Degree in Information Technology

Professional Qualification in any related field or any Related Technical Certificates