JOB SCOPE

To plan and execute the audits related to IT systems & networks infrastructure and applications to ensure compliance with laws, regulations, and industry standards. Assess and test IT controls to identify weaknesses or deficiencies in the IT infrastructure and systems. Provide assurance, consultancy and recommendations on control deficiencies to the audit, risk & committee.

ACCOUNTABILITIES

• Prepare IT engagements Audit Plan for Airports IT systems and execute the audits according to the plan across airport systems, ensuring compliance with internal policies, industry standards, and regulations. (Plan / Execute / Report / Follow-up)
• Maintain Audit Universe of IT Application Systems.
• Evaluate the effectiveness of IT internal controls, focusing on access controls, data protection, and user authentication to ensure data confidentiality, integrity, and availability.
• Assess the company’s IT governance framework for compliance with applicable standards and best practices such as ISO 27001, NIST, GDPR, and local regulations related to data privacy, security, and technology management.
• Assess access controls, change management, data integrity, and system resilience.
• Support data-enabled and continuous auditing techniques.
• Review technical audit working papers and findings.
• Review contracts and SLAs with external IT vendors to ensure performance and service delivery meet agreed terms.
• Draft IT audit reports and recommendations.
• Engage with IT management and escalate critical risks.

QUALIFICATIONS AND EXPERIENCE

• Bachelor’s degree in Computer Science, Information Systems, IT or any relevant field. Master’s degree is a plus.
• Minimum of 7-10 years of related work experience in IT audit with 3 - 4 years in supervisory level, preferable in aviation sector.
• CISA or equivalent International Professional Certification in Information Security Audit.
• Excellent leadership, mentoring and communication skills.

SKILLS AND COMPETENCIES

• Strategic thinking
• Leadership
• Problem solving
• Attention to Detail
• Negotiation
• Influencing
• Results focus
• Communication
• Situational awareness
• Teamwork