Manager Internal Audit - Information Technology

About Dubai Holding

Role overview

Key accountabilities

• Contribute to enterprise IT risk assessment and the risk-based Technology Audit plan; scope audits based on business context, architecture, and controls.
• Plan and execute audits of IT governance, cybersecurity, applications, infrastructure, and technology-enabled processes.
• Test IT general controls, automated application controls, and supporting manual controls; identify deficiencies, causes, and risk implications.
• Prepare evidence-based reports and recommendations; agree corrective actions, track implementation, and escalate overdue or high-risk matters.
• Engage stakeholders, provide technology risk and controls insight, and support ad hoc, regulatory, and external assurance work.
• Monitor technology and regulatory developments; improve audit methods, tools, and templates and share knowledge with the team.

Experience and education

• 6–8 years of progressive IT audit, technology risk, or information security assurance experience.
• A bachelor’s degree in IT, computer science, information systems, or a related field is required.
• CISA certification is required; CISM, CRISC, CIA, or ISO 27001 Lead Auditor is advantageous.
• Big Four or large internal audit experience in a complex multi-entity organization is preferred.
• International experience and understanding of cultural and market differences, especially in the Middle East and Asia.

Technical and behavioral competencies

• IT audit delivery, IIA Standards, IT governance and controls, ITGCs, application controls, and cybersecurity assurance.
• Exposure to cloud administration and ERP environments; audit analytics, data analysis, documentation, and technical writing.
• Audit software such as TeamMate+ or AuditBoard; data tools such as Excel, SQL basics, or BI tools.
• Awareness of COBIT, ISO 27001, NIST CSF, UAE requirements such as NESA and data protection, and Agile or SDLC practices.
• Strong analysis, communication, integrity, objectivity, prioritization, collaboration, and relationship-building.