Senior IT Auditor - Technology Assurance
Posted date [2026-08-26]
(ID: 50230)
 |
Founded in 1971, ADNOC is a leading diversified energy group, wholly owned by the Abu Dhabi Government. Our network of fully integrated businesses operates across the energy value chain, helping us to responsibly meet the demands of an ever-changing energy market.
Already in the top tier of the lowest carbon intensity oil and gas producers in the world, we are taking significant steps to make today’s energy cleaner while investing in the clean energies of tomorrow, strengthening our position as a reliable and responsible global energy provider. We are allocating an initial $23 billion to advance and accelerate lower-carbon solutions, investing in new energies and decarbonization technologies to enable our net zero by 2045 ambition and our commitment to zero methane emissions by 2030. ... |
Job Description and Requirements
Senior IT Auditor - Technology AssuranceJob Snapshot
Role: Senior IT Auditor - Technology Assurance
Location: Abu Dhabi Emirate, United Arab Emirates
Industry: Oil and Energy
Function: Accounting/Auditing
Experience: Minimum 8 years
Job Type: Full-time
Position Overview
Senior IT Auditor - Technology Assurance in Abu Dhabi Emirate, United Arab Emirates is a senior Oil and Energy opportunity focused on technology risk, internal audit, IT governance, cybersecurity controls and enterprise assurance. The role leads risk-based IT audit engagements from planning through reporting, evaluates complex information systems and technology controls, supports development of the annual audit plan and provides recommendations that strengthen governance, risk management and control effectiveness across ADNOC and its Group Companies.
Job Details
Country: United Arab Emirates
City: Abu Dhabi Emirate
Industry: Oil and Energy
Function: Accounting/Auditing
Salary: 25000-38000
Estimated salary range based on similar jobs in the job city; please confirm the final offer
with the employer.
Gender: Any
Candidate Nationality: Any
Job Type: Full-time
Role Context
The Senior IT Auditor provides independent assurance over technology risks, governance processes and information system controls supporting complex corporate and operational environments. The position combines risk assessment, audit planning, technical testing, data analytics and stakeholder engagement to identify control weaknesses and recommend practical improvements. The role also supports Audit Committee reporting, Group-wide audit methodology and governance initiatives while guiding junior auditors through technically demanding assignments.
Key Responsibilities
* Perform IT audit engagements from pre-planning and risk assessment through fieldwork, reporting, follow-up and formal closure.
* Support periodic enterprise risk assessments with particular focus on information technology, cybersecurity and digital control risks.
* Assist in developing the Annual Audit Plan using risk-based methodologies.
* Review and maintain the IT audit universe to ensure significant technology risks are appropriately represented.
* Provide input to periodic reports covering IT audit activities, performance, control weaknesses and significant risk exposures.
* Lead IT auditors during examination and analysis of systems, records, processes and supporting evidence.
* Develop detailed audit programs and Risk and Control Matrices for assigned engagements.
* Define audit objectives, inherent risks, key controls, procedures and testing approaches.
* Select appropriate audit techniques including Information Systems Audit Techniques, data analytics and statistical sampling.
* Evaluate technology governance, risk management and internal control processes against approved audit criteria.
* Identify high-risk areas and key control points within systems under review.
* Collect, validate and analyze technical and business evidence supporting audit conclusions.
* Maintain complete audit working papers and supporting evidence within the automated Audit Management System.
* Ensure audit documentation complies with approved templates, methodologies and professional standards.
* Supervise execution of audit procedures and verify appropriate coverage of approved audit objectives.
* Ensure sufficient and reliable audit evidence is obtained before conclusions and recommendations are finalized.
* Review work performed by junior auditors and ensure deliverables meet internal quality requirements.
* Evaluate management corrective actions arising from previous IT audit findings.
* Conduct follow-up reviews and update management action plan status where required.
* Prepare audit reports expressing professional opinions on governance, risk management and control effectiveness.
* Develop practical recommendations for correcting identified IT control deficiencies.
* Recommend enhancements to IT governance, technology risk and control processes that support business objectives.
* Track responses to draft and final reports and assess the adequacy of proposed corrective actions.
* Support reporting to the Audit Committee and Senior Management on audit results and significant technology risks.
* Assist with Audit Committee meeting preparation, agendas and minutes when assigned.
* Support reporting relating to Corporate Governance Framework, General Controls and Audit Committee requirements.
* Promote continuous improvement of Enterprise Risk Management, Corporate Code of Conduct, ethics and governance practices.
* Conduct awareness workshops and presentations explaining the role and value of Internal Audit.
* Escalate significant technology risks and emerging control concerns to Internal Audit management.
* Provide professional advice on Group Company Audit Committee Charters, Internal Audit Charters and IT audit methodologies.
* Support development and establishment of Group Company internal audit and governance functions when assigned.
* Coordinate specialized professional training programs across Internal Audit teams.
* Conduct benchmarking and technical research to resolve complex audit issues and identify control gaps.
* Assess IT processes including systems development, infrastructure management, logical access and change management.
* Review operating systems, databases, networks, routers, switches, firewalls and related technology infrastructure.
* Evaluate ERP environments and associated application and general IT controls.
* Apply data analytics techniques to complex datasets to identify anomalies, control failures and risk indicators.
* Consider Operational Technology processes and systems when assessing technology risks in industrial environments.
* Coordinate with external auditors, assurance providers and Internal Audit service providers to improve coverage and reduce duplicated work.
* Liaise with the Abu Dhabi Accountability Authority when government audit coordination is required.
* Contribute to budget planning, MIS reporting, performance monitoring and continuous improvement initiatives.
* Train and develop assigned staff to improve audit capability, technical knowledge and professional effectiveness.
Ideal Profile
* Bachelor\'s Degree in Computer Science, Information Technology, Finance, Auditing or an equivalent discipline.
* Minimum 8 years of relevant IT internal audit experience.
* Experience within Oil and Gas operations and understanding of technology risks affecting complex industrial and corporate environments.
* CISA certification is mandatory.
* CISSP, CISM, GIAC or comparable technology and cybersecurity certifications are preferred.
* In-depth understanding of ITAF and relevant professional IT assurance frameworks.
* Strong working knowledge of COBIT.
* Strong understanding of ITIL principles.
* Knowledge of ISO27000 standards.
* Familiarity with NIST cybersecurity and technology risk frameworks.
* Advanced understanding of IT governance, risk and control concepts.
* Strong experience auditing systems development processes.
* Practical expertise in access rights management and identity control.
* Experience evaluating IT change management processes.
* Advanced technical understanding of operating systems and databases.
* Strong knowledge of network infrastructure including routers, switches and firewalls.
* Experience reviewing ERP applications and associated technology controls.
* Awareness of Operational Technology environments and related risks.
* Strong experience using data analytics tools during audit engagements.
* Ability to evaluate complex technical information and develop evidence-based conclusions.
* Strong understanding of risk-based internal audit planning.
* Experience managing multiple audit assignments and monitoring time against audit plans.
* Sound project management and audit engagement management capabilities.
* Strong report writing, stakeholder communication and presentation skills.
* Ability to interact effectively with management, Audit Committees, external auditors and assurance providers.
Skills Set
* IT internal audit
* Technology assurance
* IT risk assessment
* Risk-Based Auditing
* CISA
* COBIT
* ITAF
* ITIL
* ISO27000
* NIST
* Information Systems Audit Techniques
* IT governance
* Technology risk management
* Internal controls
* Risk and Control Matrix
* Audit planning
* Audit execution
* Audit working papers
* Audit Management Systems
* IT general controls
* Systems development audit
* Access rights management
* Change management
* Infrastructure audit
* Operating systems
* Database auditing
* Network infrastructure
* Routers
* Switches
* Firewalls
* ERP controls
* Operational Technology
* OT risk
* Cybersecurity controls
* Data analytics
* Statistical sampling
* Audit follow-up
* Management action plans
* Audit reporting
* Audit Committee reporting
* Corporate governance
* Enterprise Risk Management
* Internal Audit Charter
* IT audit methodology
* Audit benchmarking
* Control testing
* CISM
* CISSP
* GIAC
Why Join Us
This role provides experienced technology assurance professionals with broad exposure to IT governance, cybersecurity, enterprise applications, infrastructure and Operational Technology within a large-scale Oil and Energy organization. The position offers the opportunity to lead technically complex audits, influence senior management decisions and strengthen Group-wide governance while developing deeper expertise across emerging digital and industrial technology risks.
About the Company
ADNOC Group is a major integrated energy organization headquartered in Abu Dhabi with operations spanning exploration, production, processing and the wider energy value chain. Its Internal Audit function supports strong governance, risk management and control across corporate, digital and operational activities through independent assurance, professional audit standards and continuous improvement.
Gender: Any
Candidate Nationality: Any
Job Type: Full-time
Role Context
The Senior IT Auditor provides independent assurance over technology risks, governance processes and information system controls supporting complex corporate and operational environments. The position combines risk assessment, audit planning, technical testing, data analytics and stakeholder engagement to identify control weaknesses and recommend practical improvements. The role also supports Audit Committee reporting, Group-wide audit methodology and governance initiatives while guiding junior auditors through technically demanding assignments.
Key Responsibilities
* Perform IT audit engagements from pre-planning and risk assessment through fieldwork, reporting, follow-up and formal closure.
* Support periodic enterprise risk assessments with particular focus on information technology, cybersecurity and digital control risks.
* Assist in developing the Annual Audit Plan using risk-based methodologies.
* Review and maintain the IT audit universe to ensure significant technology risks are appropriately represented.
* Provide input to periodic reports covering IT audit activities, performance, control weaknesses and significant risk exposures.
* Lead IT auditors during examination and analysis of systems, records, processes and supporting evidence.
* Develop detailed audit programs and Risk and Control Matrices for assigned engagements.
* Define audit objectives, inherent risks, key controls, procedures and testing approaches.
* Select appropriate audit techniques including Information Systems Audit Techniques, data analytics and statistical sampling.
* Evaluate technology governance, risk management and internal control processes against approved audit criteria.
* Identify high-risk areas and key control points within systems under review.
* Collect, validate and analyze technical and business evidence supporting audit conclusions.
* Maintain complete audit working papers and supporting evidence within the automated Audit Management System.
* Ensure audit documentation complies with approved templates, methodologies and professional standards.
* Supervise execution of audit procedures and verify appropriate coverage of approved audit objectives.
* Ensure sufficient and reliable audit evidence is obtained before conclusions and recommendations are finalized.
* Review work performed by junior auditors and ensure deliverables meet internal quality requirements.
* Evaluate management corrective actions arising from previous IT audit findings.
* Conduct follow-up reviews and update management action plan status where required.
* Prepare audit reports expressing professional opinions on governance, risk management and control effectiveness.
* Develop practical recommendations for correcting identified IT control deficiencies.
* Recommend enhancements to IT governance, technology risk and control processes that support business objectives.
* Track responses to draft and final reports and assess the adequacy of proposed corrective actions.
* Support reporting to the Audit Committee and Senior Management on audit results and significant technology risks.
* Assist with Audit Committee meeting preparation, agendas and minutes when assigned.
* Support reporting relating to Corporate Governance Framework, General Controls and Audit Committee requirements.
* Promote continuous improvement of Enterprise Risk Management, Corporate Code of Conduct, ethics and governance practices.
* Conduct awareness workshops and presentations explaining the role and value of Internal Audit.
* Escalate significant technology risks and emerging control concerns to Internal Audit management.
* Provide professional advice on Group Company Audit Committee Charters, Internal Audit Charters and IT audit methodologies.
* Support development and establishment of Group Company internal audit and governance functions when assigned.
* Coordinate specialized professional training programs across Internal Audit teams.
* Conduct benchmarking and technical research to resolve complex audit issues and identify control gaps.
* Assess IT processes including systems development, infrastructure management, logical access and change management.
* Review operating systems, databases, networks, routers, switches, firewalls and related technology infrastructure.
* Evaluate ERP environments and associated application and general IT controls.
* Apply data analytics techniques to complex datasets to identify anomalies, control failures and risk indicators.
* Consider Operational Technology processes and systems when assessing technology risks in industrial environments.
* Coordinate with external auditors, assurance providers and Internal Audit service providers to improve coverage and reduce duplicated work.
* Liaise with the Abu Dhabi Accountability Authority when government audit coordination is required.
* Contribute to budget planning, MIS reporting, performance monitoring and continuous improvement initiatives.
* Train and develop assigned staff to improve audit capability, technical knowledge and professional effectiveness.
Ideal Profile
* Bachelor\'s Degree in Computer Science, Information Technology, Finance, Auditing or an equivalent discipline.
* Minimum 8 years of relevant IT internal audit experience.
* Experience within Oil and Gas operations and understanding of technology risks affecting complex industrial and corporate environments.
* CISA certification is mandatory.
* CISSP, CISM, GIAC or comparable technology and cybersecurity certifications are preferred.
* In-depth understanding of ITAF and relevant professional IT assurance frameworks.
* Strong working knowledge of COBIT.
* Strong understanding of ITIL principles.
* Knowledge of ISO27000 standards.
* Familiarity with NIST cybersecurity and technology risk frameworks.
* Advanced understanding of IT governance, risk and control concepts.
* Strong experience auditing systems development processes.
* Practical expertise in access rights management and identity control.
* Experience evaluating IT change management processes.
* Advanced technical understanding of operating systems and databases.
* Strong knowledge of network infrastructure including routers, switches and firewalls.
* Experience reviewing ERP applications and associated technology controls.
* Awareness of Operational Technology environments and related risks.
* Strong experience using data analytics tools during audit engagements.
* Ability to evaluate complex technical information and develop evidence-based conclusions.
* Strong understanding of risk-based internal audit planning.
* Experience managing multiple audit assignments and monitoring time against audit plans.
* Sound project management and audit engagement management capabilities.
* Strong report writing, stakeholder communication and presentation skills.
* Ability to interact effectively with management, Audit Committees, external auditors and assurance providers.
Skills Set
* IT internal audit
* Technology assurance
* IT risk assessment
* Risk-Based Auditing
* CISA
* COBIT
* ITAF
* ITIL
* ISO27000
* NIST
* Information Systems Audit Techniques
* IT governance
* Technology risk management
* Internal controls
* Risk and Control Matrix
* Audit planning
* Audit execution
* Audit working papers
* Audit Management Systems
* IT general controls
* Systems development audit
* Access rights management
* Change management
* Infrastructure audit
* Operating systems
* Database auditing
* Network infrastructure
* Routers
* Switches
* Firewalls
* ERP controls
* Operational Technology
* OT risk
* Cybersecurity controls
* Data analytics
* Statistical sampling
* Audit follow-up
* Management action plans
* Audit reporting
* Audit Committee reporting
* Corporate governance
* Enterprise Risk Management
* Internal Audit Charter
* IT audit methodology
* Audit benchmarking
* Control testing
* CISM
* CISSP
* GIAC
Why Join Us
This role provides experienced technology assurance professionals with broad exposure to IT governance, cybersecurity, enterprise applications, infrastructure and Operational Technology within a large-scale Oil and Energy organization. The position offers the opportunity to lead technically complex audits, influence senior management decisions and strengthen Group-wide governance while developing deeper expertise across emerging digital and industrial technology risks.
About the Company
ADNOC Group is a major integrated energy organization headquartered in Abu Dhabi with operations spanning exploration, production, processing and the wider energy value chain. Its Internal Audit function supports strong governance, risk management and control across corporate, digital and operational activities through independent assurance, professional audit standards and continuous improvement.
