IT/OT Auditor

IT/OT Auditor

We are looking for a professional to lead internal audit engagements in IT and Operational Technology (OT), from planning to completion. The ideal candidate will apply risk and control concepts effectively, identify potential issues, and ensure a thorough audit process.

The Role

• Conduct IT/OT audits, cybersecurity reviews, and advisory engagements.
• Adapt audit approaches to evolving technology landscapes.
• Develop detailed Audit Programs and Risk & Control Matrices (RCMs).
• Use audit techniques, data analytics, and sampling methods.
• Identify high-risk areas, key controls, root causes, and implications.
• Prepare audit reports with findings, conclusions, and recommendations.
• Document and update working papers in the Audit Management System.
• Monitor managements corrective actions through follow-up audits.
• Report audit activities, risks, and governance issues to senior management.
• Provide insights on technology trends and issues affecting the organization.
• Conduct special reviews and support operational audit technology reviews.

The Person

• Bachelor's degree in Computer Science or related field.
• 57 years of IT internal auditing experience, with 3+ years in OT/ICS.
• Expertise in IT/OT security programs and cybersecurity assessments for ICS/SCADA systems.
• Strong knowledge of IT/OT security, including network/industrial protocols, Active Directory, backups, virtualization, and IT-OT convergence.
• Proficient in OT security tools (e.g., data diode, EDR, SIEM, patch management).
• Advanced knowledge of operating systems, databases, and network infrastructure.
• Familiarity with OT/ICS standards like IEC 62443 and NIST 800-82.
• Knowledge of regulatory standards (e.g., NCA, NESA, ISR).
• Experience with OEM systems (Honeywell, Yokogawa, Siemens) is a plus.
• Deep understanding of IT assurance frameworks (COBIT, ITIL, ISO27000, NIST).
• Skilled in independent task completion, meeting deadlines, and execution.
• Proficient in data analytics for evaluating systems and drawing conclusions.
• Strong knowledge in planning and project management.

Opportunity to work remotely or in-office following the Middle East calendar, with potential overseas travel