Responsibilities:
- Carry out review of organizational activities assigned following departmental standards, as well as the Standards for the Professional Practice of Internal Audit.
- Assess internal control processes.
- Produce and review reports and audit work papers, ensuring effective documentation of results of reviews on assigned activities and the recommended actions that management should take for easy follow-up.
- Identify potential IT risks and related issues by applying knowledge of Information Technology industry trends and the present IT environment.
- Participate in major IT initiatives and projects, as well as in reviews of security systems and internal controls under development.
- Possess advanced knowledge of network and application vulnerability assessment, IT practices, risk assessment practices, change control, data privacy, and business continuity.
- Have broad audit experience across various areas of IT, including databases, operating systems, and applications.
- Exhibit strong attention to detail, organization, and project management skills.
- Demonstrate sound judgment, business risk awareness, and an inquisitive personality; ability to think critically and assess events and outcomes professionally.
- Show strong ability to research and gather information from both business and IT functions.
- Utilize strong analytical and problem-solving skills to resolve issues promptly as they occur.
- Work collaboratively and cooperatively with all employees irrespective of their status in the organization.
- Manage multiple projects and responsibilities effectively.
- Exhibit exceptional interpersonal skills to encourage others to contribute to achieving departmental goals and to build consensus across diverse teams.
Minimum Requirements:
- A Bachelor's degree in Information Technology, Computer Science, Business Administration, or a related field. Relevant certifications (e.g., ITIL, TMMI, etc.) are highly beneficial.
- Minimum of 5-7 years of experience in IT audit, risk management, or compliance roles.
- In-depth understanding of IT governance frameworks such as ITIL or ISO 27001.
- Knowledge of relevant industry standards and regulations.
- Strong knowledge of risk management practices, including risk assessment, mitigation strategies, and control frameworks.
- Experience in managing IT governance projects and collaborating with cross-functional teams.
- Strong ability to analyze governance and compliance data to identify trends, risks, and opportunities for improvement.
- Exceptional written and verbal communication skills, with the ability to convey complex concepts clearly to stakeholders at all levels.
- Experience working with IT auditing and IT teams.
Preferred Qualifications:
- Familiarity with business continuity planning and disaster recovery processes.
- Expertise in cloud governance and cloud security frameworks.
- Knowledge of business intelligence and reporting tools to track IT governance metrics.
- Knowledge in applying ISO/IEC 27001, ISO/IEC 20000, ISO/IEC 22301, ISO/IEC 27018, ISO/IEC 9001, CMMI, ITIL, TMMI is a plus.