IT Internal Audit Manager

Description

• Support development and enhancement of the IT and other internal control and risk management frameworks.
• Works independently, manage multiple audits concurrently, and delivers to tight deadlines with accuracy and discipline.
• Lead audits across IT general controls, application controls, project systems, cybersecurity, IT infrastructure, networks, cloud environments, data, change programmes, and IT‑related processes.
• Build credibility and influence across all levels, fostering accountability, strong relationships, and operational excellence.
• Conduct risk assessments and ensure appropriate audit coverage of higher-risk IT areas.
• Lead the extraction, preparation, and analysis of data from ERP (Oracle) and other business systems to drive operational and IT audit testing, ensuring robust, accurate populations and insights.
• Own the IA function’s data analytics and AI adoption, acting as the primary analytics partner for audit teams by using data to identify risks, anomalies, and trends across IT and business processes, driving targeted testing and supporting risk-based decision-making.
• Own, develop, execute and manage the annual IT internal audit plan aligned with business objectives and key IT risk areas.
• Prepare clear and well-structured audit reports outlining findings, implications, and actionable recommendations.
• Ensure compliance with Internal Audit Standards (IIA), relevant IT audit frameworks, and company policies, and drive continuous improvement of internal audit methodology, SOPs, and practices.
• Partner with IT, Security, and business teams to understand processes, identify risks, and provide trusted advisory support, maintaining independence and professional judgment.
• Deliver practical guidance during process changes, system enhancements, and strategic initiatives, ensuring effective controls and risk management.
• Promote a culture of governance, compliance and continuous improvement.
• Review internal controls, identify gaps or vulnerabilities, assess root causes, and recommend practical, business-focused solutions.
• Leads and develops the audit team, providing mentorship, overseeing performance, and promoting high standards and continuous development.
• Assist in or take ownership of select audits across operational, financial, compliance, process, project, and contract areas as needed.
• Monitor implementation of corrective actions and conduct follow-up reviews.
• Present audit outcomes to senior management and support the development and closure of remediation plans.
• Identify emerging IT and other risks within the EPC sector and recommend proactive mitigation strategies to strengthen business resilience.

Requirements

• Excellent command of the English language in both oral and written communication and skills, including report writing and audit reporting to senior management and stakeholders.
• Strong knowledge of auditing standards (IIA), IT governance, IT controls, and security frameworks including COBIT, NIST, ISO 27001 and risk management methodologies.
• Ability to summarise complex findings clearly, present recommendations, and engage management with clarity and influence.
• Additional IT-risk or cybersecurity certifications (CISM, CRISC, or CISSP) are highly desirable.
• Effective influencing, presentation and interpersonal skills.
• Bachelor’s degree in commerce, IT, Computer Science, Information Systems, or related field.
• Certified Information Systems Auditor (CISA) is mandatory.
• Certified Internal Auditor (CIA) strongly preferred.
• Strong analytical thinking, critical judgment, problem‑solving and commercial awareness.
• High integrity, objectivity, and professional ethics, maintaining independence and confidentiality.
• IT Internal audit experience is required, with EPC or Oil & Gas experience highly preferred.
• Chartered Accountant (CA, ACA, ACCA, CPA or equivalent) is mandatory.
• Competence in stakeholder engagement by liaising with different business units, external auditors, and management to achieve alignment and buy‑in for audit findings and remediation.
• 5–10 years post‑qualification experience in IT internal audit, technology risk, cybersecurity audit, or related roles.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance