Adnoc
Senior Auditor, IT
- Permanent
- Abu Dhabi, United Arab Emirates
- Experience 5 - 10 yrs
Job expiry date: 11/10/2026
Job overview
Date posted
27/08/2026
Location
Abu Dhabi, United Arab Emirates
Salary
AED 20,000 - 30,000 per month
Compensation
Job description
In this role you will perform assigned audit engagements from start to finish at ADNOC HQ, including preplanning and wrap-up activities, ensuring application of risk and control concepts to scenarios encountered and identifying potential issues. You will assist in the periodic Risk Assessments and development of Risk-Based Work Plans focusing on IT risks. You are responsible for assisting in initiating and promoting the establishment and continuous improvement of the Corporate Governance Framework, including Enterprise Risk Management and the Corporate Code of Conduct. Your responsibilities include assisting in the development of the Annual Audit Plan based on risk assessment results focused on IT risks, and participating in reviewing and updating the IT audit universe. You will lead IT auditors in the examination and analysis of records through executing audit program steps, developing a detailed audit program and Risk & Control Matrix for assigned audits including objectives, potential risks, and key controls. You are responsible for determining auditing procedures, including the use of Information Systems Audit Techniques, data analytics, and statistical sampling methods, and ensuring adequate working papers are documented in the automated Audit Management System. You will identify, obtain, analyze, and appraise related systems and evidentiary data, and appraise the adequacy of corrective actions taken by management through follow-up audits. In this role you will prepare audit reports with conclusions expressing professional opinions on the adequacy and effectiveness of risk management and control systems, recommending improvement options. You will also assist in periodic reporting to the Audit Committee and Senior Management, supervise junior audit staff, and coordinate with various internal and external stakeholders including ADAA and external auditors.
Required skills
Key responsibilities
- Perform assigned audit engagements from start to finish, including preplanning and wrap-up activities
- Assist in the periodic Risk Assessments and development of Risk-Based Work Plans focusing on IT risks
- Assist in initiating and promoting the establishment and continuous improvement of the Corporate Governance Framework
- Assist in the development of the Annual Audit Plan based on risk assessment results
- Participate in reviewing and updating the IT audit universe
- Provide input for periodic reporting on IT audit activities and performance
- Lead IT auditors in the examination and analysis of records through executing audit program steps
- Develop a detailed audit program/Risk & Control Matrix for assigned audits including objectives, risks, and controls
- Determine auditing procedures including Information Systems Audit Techniques, data analytics, and statistical sampling
- Ensure adequate working papers are documented and updated in the automated Audit Management System
- Identify, obtain, analyze, and appraise related systems and evidentiary data/information
- Appraise the adequacy of corrective actions taken by management through follow-up audits
- Ensure approved audit objectives are met with adequate coverage and sufficient evidence
- Participate in conducting special reviews and undertake administrative duties as directed
- Supervise audits in accordance with approved RCM and professional standards
- Ensure tasks assigned to junior staff are adequately performed and meet quality standards
- Identify high risk areas and key control points of systems to be reviewed
- Prepare audit reports with conclusions on the adequacy and effectiveness of risk management and control systems
- Recommend practical enhancements in IT governance, risk, and control processes
- Follow up on replies to draft and final audit reports and review corrective actions
- Assist in periodic reporting to the Audit Committee and Senior Management
Experience & skills
- Hold a bachelor's degree in Computer Science or a related IT discipline, Finance/Auditing, or equivalent discipline
- Bring 8 years of relevant experience in IT internal auditing, with varied experience in oil and gas operations
- Demonstrate in-depth knowledge of the International Professional Practices Framework for IT Assurance/IT Assurance Framework (ITAF) and related frameworks such as COBIT, ITIL, ISO27000, and NIST
- Show experience managing and tracking time for different Internal Audit related activities
- Demonstrate awareness of Operational Technology (OT) processes and systems
- Show in-depth knowledge of IT processes including system development, infrastructure review, access right management, and change management
- Demonstrate expertise in collecting and analyzing complex data using data analytics tools
- Show extensive knowledge of planning and project management areas
- Demonstrate advanced technical knowledge of operating systems, databases, network infrastructure components, and ERP systems
- Hold a mandatory IT audit certification such as CISA
- Other related certifications such as CISSP, CISM, or GIAC are preferred