Description
Job description / Role
Job Type
Full Time
Job Location
UAE
Nationality
Any Nationality
Salary
Not Specified
Gender
Not Specified
Arabic Fluency
Not Specified
Job Function
Accounting & Audit
Company Industry
Oil & Gas / Energy
Job purpose
Perform assigned audit engagements in the domain of digital infrastructure, from start to finish, inclusive of preplanning and wrap-up activities ensuring application of risk and control concepts to scenarios encountered, and identify any potential issues within ADNOC and group companies. Contribute in the capacity of SME in the periodic risk assessments and development of the risk-based work plans focusing on infrastructure security (network, cloud, systems, databases etc.) including vulnerability assessments and penetration testing at infrastructure and network layers within ADNOC and group companies.
Key accountabilities
Job specific accountabilities
Internal audit plan
Develop the audit universe to ensure it covers digital infrastructure and cybersecurity risks in line with other D&T risk areas like digital governance, OT, process, applications, technology interface, and emerging technologies that could affect the ADNOC business operations.
Review and update the D&T audit universe specifically for digital infrastructure and network.
Develop and implement strategic initiatives (e.g., infrastructure assurance plan) that impact the group-wide audit plans and oversee the execution to ensure it fulfills the objectives.
Audit execution
Perform audits, advisory engagements, and other influencing activities in highly technical areas of current and emerging technologies within ADNOC and group companies.
Develop a detailed audit program / risk and control matrix (RCM) for the assigned audit, including the objectives, potential risk, key controls, audit procedures, and the use of audit techniques and tools to evaluate governance, risks, and control processes, and submit audit program to the management for review and approval.
Ensure that adequate working papers and all relevant information are continuously documented and updated in the automated audit management system in accordance with predefined templates and audit procedures.
Ensure that approved audit objectives have been met with adequate coverage of all relevant areas and sufficient audit evidence is obtained to support the conclusion and recommendations in accordance with professional audit standards.
Audit reports
Prepare an audit report with a conclusion, expressing professional opinions on the adequacy and effectiveness of risk management, control systems, and the efficiency with which activities are carried out.
Recommend improvement options to rectify reported deficiencies for department manager’s review.
Recommend practical enhancements in digital and technology governance, risks, and control processes to assist in the achievement of the company's business objectives.
Coordination
Assist in the periodic reporting to the audit committee and senior management on technology audit activities, performance, significant risk exposures, controls/governance issues, and other related matters within ADNOC and group companies.
Minimum qualification
Bachelor's degree in computer science or related technology discipline, or equivalent discipline.
Minimum experience, knowledge & skills
8-10 years of relevant experience in D&T or IT internal auditing, and a minimum of 5+ years of work experience in digital infrastructure and cybersecurity domain.
Advanced technical knowledge of core infrastructure, network components (routers, switches, firewalls etc.), cloud security, different operating systems, databases, virtualization technologies and security operations.
Sound knowledge coupled with extensive experience in technology-related risks in emerging areas such as cloud, Internet of Things (IoT), zero-trust / defense in-depth architecture, identity and access management, digitalization, automation etc.
Strong hands-on experience in conducting vulnerability assessments and penetration testing at infrastructure, network, and system layers. Bug bounty hunting would be an added advantage.
Exposure in reviewing infrastructure platforms hosting AI/ML solutions to assess related risks, security controls, and governance aspects across the AI technology stack would be an advantage.
In-depth knowledge of digital processes, including but not limited to business continuity and disaster recovery, enterprise architecture, infrastructure review (on-prem and cloud), access-right management, change management and DevOps etc.
In-depth knowledge of International Professional Practices Framework for IT Assurance / IT Assurance Framework (ITAF) and other related frameworks/standards (e.g. COBIT, ITIL, ISO27000, ISO22301, NIST) and their interpretation/application to IS/IT auditing practice.
Experience in managing and tracking time for different internal audit-related activities.
Expertise in collecting and analyzing complex data using data analytics tools, evaluating information and systems, and drawing logical conclusions.
Extensive knowledge of planning and project management areas.
Awareness/knowledge of ERP and operational technology (OT) processes and systems (preferred).
Professional certifications
IT audit certification, CISA, is mandatory or willing to obtain within one year of joining. Other related certifications (GIAC, CISSP, OSCP, CISM, etc.) are preferred. Technical certifications (CCNA, CCIE, Azure, CCSK / CCSP, GPEN etc.) are desirable.
About the Company
We are one of the world's leading energy producers, and a primary catalyst for Abu Dhabi’s growth and diversification.
We operate across the entire hydrocarbon value chain, through a network of fully-integrated businesses, with interests that range from exploration, production, storage, refining and distribution, to the development of a wide-range of petrochemical products.
Since 1971, we have created thousands of jobs, driven the growth of a diverse knowledge-based economy, and played a key role in Abu Dhabi’s global emergence.
Today, we continue to look for new and innovative ways to maximize the value of our resources, pioneering those approaches and technologies that will ensure we are able to meet the demands of an ever-changing energy market, and continue to have a positive impact on the Abu Dhabi economy for generations to come.
Apply Now