General Manager.General Department of IT Audit

Summary:
The General Manager of the General Department of IT Audit leads the organization’s technology audit function, providing independent assurance on the effectiveness of IT governance, risk management, and controls. The role develops the department’s audit strategy, oversees risk-based audits, and communicates actionable insights to senior leadership to support regulatory compliance, operational resilience, and continuous improvement.

Job Responsibility:
- Develop and execute a risk-based IT audit strategy aligned with organizational priorities and applicable standards.
- Lead audits of IT governance, cybersecurity, infrastructure, applications, data management, cloud services, and technology projects.
- Assess the design and effectiveness of IT controls, identify gaps, and recommend practical improvements.
- Oversee audit planning, fieldwork, reporting, and follow-up on agreed corrective actions.
- Present significant findings, risks, and recommendations to executive management and relevant governance committees.
- Maintain the independence, quality, and consistency of the IT audit function.
- Manage departmental budgets, resources, performance, and professional development.
- Build effective working relationships with business, technology, risk, compliance, and external audit stakeholders.
- Monitor changes in technology, regulations, and industry practices that may affect the audit plan.

Candidate Requirements:

- Extensive experience in IT audit, information security, technology risk, or related assurance work, including leadership experience.
- Strong knowledge of IT governance, cybersecurity, internal controls, audit methodologies, and relevant regulatory requirements.
- Professional certifications such as CISA, CISSP, CIA, or equivalent are preferred.
- Demonstrated ability to lead complex audits and translate technical findings into clear business recommendations.
- Excellent leadership, communication, stakeholder management, and decision-making skills.
- Strong analytical, report-writing, and project-management capabilities.

-IT audit strategy development and execution
- IT governance, risk management, and compliance
- Cybersecurity and information security auditing
- IT control frameworks (e.g., COBIT, ISO 27001, NIST)
- Enterprise risk assessment and mitigation
- Audit planning, resource allocation, and quality assurance
- Internal controls design and effectiveness assessment
- Regulatory and standards compliance monitoring
- Data analytics and continuous auditing
- IT systems, infrastructure, cloud, and application controls
- Audit reporting and presentation to executive leadership
- Stakeholder management and cross-functional collaboration
- Team leadership, coaching, and performance management
- Strategic planning and change management
- Budget management and operational oversight
- Strong judgment, integrity, and professional ethics