IT Internal Auditor - ACL and Data Analytics

Overview

We are seeking a seasoned IT Internal Auditor to join a reputable organization based in Doha, Qatar. The candidate will primarily be responsible for evaluating technology controls, identifying risks, and assessing the efficiency of IT systems and processes with a strong emphasis on ACL (Audit Command Language) and data analytics to analyze extensive datasets for control weaknesses, anomalies, and exceptions.

Key Responsibilities

• Design and conduct risk-oriented IT audits.
• Assess IT General Controls encompassing access rights, change control, operations, backups, and security procedures.
• Review application controls alongside business processes to detect risk exposures and control deficiencies.
• Utilize ACL for data extraction, analysis, and validation of large datasets.
• Create ACL scripts to detect exceptions, duplicates, unusual transactions, and violations of controls.
• Apply continuous auditing and data analytics methodologies to recognize trend deviations and anomalies.
• Examine user access rights, Segregation of Duties (SoD), high-level privileges, and system activity logs.
• Verify the completeness and reliability of data used during audit procedures.
• Document audit observations, risks, collected evidence, and recommend corrective actions.
• Compile audit reports and present findings to management and stakeholders.
• Monitor remediation efforts and carry out follow-up testing.
• Assist in compliance audits aligned with frameworks such as COBIT, ISO 27001, and PCI DSS.
• Work collaboratively with Internal Audit, Information Security, Risk Management, Compliance, and IT departments.

Required Qualifications and Experience

• 5 to 7 years of pertinent experience in IT Audit, Internal Audit, Technology Risk, or Information Security roles.
• Proficient, hands-on experience with ACL software is mandatory.
• In-depth knowledge of IT General Controls (ITGC) and application controls.
• Capability to use data analytics for identifying anomalies through data extraction and evaluation.
• Familiarity with risk-based auditing procedures and internal control frameworks.
• Bachelor's degree in Information Technology, Computer Science, Accounting, Finance, or related fields.
• Strong skills in analysis, documentation, problem resolution, and effective communication with stakeholders.

Preferred Certifications

• Certified Information Systems Auditor (CISA)
• Certified Internal Auditor (CIA)
• Certified in Risk and Information Systems Control (CRISC)
• ISO 27001 certification
• Other relevant certifications in information security or auditing disciplines