The Internal Audit Directorate reports directly to the Qatar Foundation Executive Board of Directors.  The Internal Audit Directorate is responsible for administering a comprehensive audit and risk management program, which supports the efficient and effective operations of Qatar Foundation in accordance with strategic plans, organizational objectives, and applicable organizational policies and regulations. Due to the increasing volume of audit work required and continuous organizational growth, the organization has created a new position: Senior IT Auditor.

The Senior IT Auditor will need to independently perform internal audits with minimal supervision, as well as direct and supervise audit projects that are performed by internal audit staff.  The Senior IT Auditor will be responsible for performing routine auditing assignments, moderately difficult in nature, requiring detailed planning and comprehensive analysis to identify organizational IT risks, internal controls, as well as business risks.  The candidate therefore should possess a strong IT Audit background and should understand the relationship between IT Controls and business risks.  The Senior IT Auditor will serve as a key member on a wide variety of Information Technology Audit and Business Process audits.  The Senior IT Auditor will plan and execute audits, identify and discuss issues with all level of management, reach appropriate recommendations and consolidate those recommendations into well written and concise audit reports. 

Principal Accountabilities

1.    Coordinate the planning and execution of effective information systems and related operational reviews with limited supervision. Demonstrates the ability to identify internal control risks, business risks and operational cost reduction opportunities. Coordinates and supervises multiple audit projects. Participates in the development of the annual Information Technology audit plan. Provides input to support selecting, training, and evaluating personnel.

2.    Perform a wide variety of IT audit reviews covering IS processes, system development projects SDLC, Change Management, IT project management, Disaster Recovery/ Business Continuity, Security, Application development, infrastructure and general computer controls.

3.    Perform risk analysis for the assigned audit areas and identify appropriate control procedures to address the identified risks.

4.    Prepare and perform compliance audit tests of control design and effectiveness and substantive audit tests.

5.    Document and evaluate audit test results in accordance with defined plans, budgets, and schedules, the Audit Methodology within the IIA (Institute of Internal Auditors), ISACA and other applicable standards.

6.    Evaluate compliance with Organization Policies, Technical Standards and generally accepted best practice.

7.    Assess IT control procedures to mitigate IT risks including process integrity, data availability and security access. Evaluate overall hardware and software platforms including network and telecommunications infrastructure.

8.    Prepare concise and well organized working papers which accurately reflect the results of audit tests performed.  Performs a final review of the work of Senior and Staff auditors.

9.    Review draft audit reports and prepares the final audit report. Discusses preliminary audit findings with management directly responsible for resolution and presents final audit results to management ultimately responsible for the area under review. Develop recommendations for improving risk management processes, procedures, and controls.

10.  Obtain confidence, respect, and cooperation of auditee and other appropriate levels of management in providing quality, cost-effective services which meet Qatar Foundation and auditee needs. Maintains a professional appearance and exercises a positive attitude regarding the project, department, and organization.  Provides on-the-job training and effective motivation.

11.  Perform work in an efficient and effective manner, within the established work plan. As well as maintain a thorough understanding of IT auditing and the Qatar Foundation information processing environment.

12.  Maintain a professional development plan relative to the performance expectations for the above accountabilities and assists in departmental professional development planning.

Job Requirements/Skills:

1.    4 years in Management Information System/Accounting Information System, IS Auditing, Accounting, or Business Administration degree a recognized designation university;

2.    Minimum of 6 years IT operations audit related work experience, ideally within a large and diverse organization; Big 4/public auditing/ internal audit experience highly desirable;

3.    A minimum of five years of progressively responsible auditing experience;

4.    Candidates at this level should demonstrate a fundamental knowledge of generally accepted IT audit standards, statements and practices, and IT security and control practices.

5.    Sound project management skills as evidenced by management of IT operational audits, or equivalent engagement/project experience;

6.    Excellent written and verbal communication skills as well as reports presentation skills;

7.    Excellent organization, time management, and project management skills and ability to coordinate several projects simultaneously and work on multiple concurrent tasks;

8.    Knowledge of technology industry best practice standards, including COBIT, ITIL, ISO 17799, ISACA;

9.    Familiar with making recommendations to all level management within the organization;

10.  Strong knowledge of internal control concepts, strong problem solving abilities, and research and analytical skills;

11.  Strong interviewing skills to auditees and all levels of management.

12.  Experience and knowledge of a risk based auditing approach, COBIT framework, and familiar with compliance auditing;

13.  Solid understanding of IT risk and control principles, and their applicability to typical business environments and issues;

14.  Excellent communication and listening skills with the ability to interact effectively with all levels of management;

15.  Willingness to go the "extra mile" in terms of meeting departmental objectives

16.  High level of professionalism, integrity and ethics;

17.  Oracle ERP financial application experience a plus

18.  Excellent PC skills (MS Office: Word, Excel, Access, Power Point) and Oracle, Access database concept

Pluses

1.    Written & verbal fluency in Arabic/English with GCC business experience

2.    Knowledge with Oracle ERP financial systems

3.    Familiarity with education/foundation non profit organization business units

4.    CISA, CISM, or CISSP

Communication Skills/Presentation:

1.    Verbal; must be able to communicate appropriately with auditees

2.    Written; ability to write concise reports summarizing audit objectives and results

3.    Ability to exercise judgment