At Daman – National Health Insurance Company, an IT Audit Lead will support in development and implementation of department strategy according to the company strategy. This role is responsible in setting the section’s operational goals, initiate measures and has accountability in reaching these goals to improve the overall unit’s performance.

Responsibilities of IT Audit Lead

Standard Duties:

• Support the performance management process that measures and evaluates progress against departmental goals.
• Lead and guide the team with the overall performance accountability of subordinates by developing their skills and competencies and ensuring proper resource allocation, monitoring, reporting, and conducting team meetings.
• Support the Director in ensuring appropriate staffing levels to keep the department functioning in full performance capacity. Conduct interviews and hire new staff.
• Manage the section’s expenditure and requirements minding the impact on financial budget.
• Foster organisational culture by establishing quality awareness and service orientation. Complying and implementing processes such as Project and Change Management.
• Develop, implement and ensure adherence of policies and procedures.
• Promote and support the recruitment and development of UAE Nationals to significantly contribute to Daman’s strategic goals.

Department Specific:

• Develop and lead the IT Audit function.
• Conduct detailed annual IT risk assessments and develop/update IT Audit Plan annually.
• Ongoing assessment of compliance with Audit Plan and established KPIs.
• Lead risk-based IT audits (e.g. project assessments, security reviews, capacity and resilience reviews) covering the full audit cycle (planning, fieldwork and reporting phases).
• Produce draft / final IT audit reports within agreed timeframes and discuss findings / risks / recommendations with management.
• Provide IT data analytics support (e.g. ACL) to operational audits/fraud investigations.
• Evaluate responses from Management on audit findings and follow up on due action plans based on continuous follow up methodology.
• Influence the adoption of best practice IT processes / controls within the audits undertaken.
• Conduct advisory / special assignments approved by the Audit Committee.
• Develop effective audit work schedules and lead kick-off, audit status and exit meetings.
• Supervise outsourced IT audits performed by external service providers.
• Implement the Internal Audit Charter.

Strategic / Annual Audit Planning:

• Participate in risk assessments and development of risk register for the Company.
• Participate in the development of the Internal Audit Strategy and Audit Plan.
• Participate in the review of the Internal Audit Strategy and Audit Plan Special Projects.
• Supervise and execute special investigations/projects requested by the Audit Committee Reporting to the Director, Internal Audit.
• Present the findings of the IT audits to the Director, Internal Audit.
• Provide regular feedback to the Director, Internal Audit for status of IT audit assignments.
• Perform follow up assignments and report to the Director, Internal Audit on the status of implementation of IT audit recommendations.

Audit Planning:

• Plan and lead the opening planning meetings and prepare minutes of planning meetings.
• Prepare preliminary risk assessments.
• Prepare testing strategies to achieve the objectives of IT audit assignments.
• Prepare detailed scope letters to be communicated to respective process owner(s).
• Plan and lead the use of computer software that aide in performing audit tests.
• Prepare internal audit programs including sampling techniques to be used.
• Plan resources required and the special skills needed to execute the specific IT audit plan.
• Prepare the allocation of the resources available to each phase of the IT audit assignment and the internal timetable schedule and budget for completing the IT audit assignment.
• Prepare a detailed risk assessment of the area under review and update the IT audit plan and the testing strategy if required.

Audit Execution

• Agree final risk assessment with Director, Internal Audit and respective process owner(s).
• Ensure sufficient testing is done for internal controls identified in the planning phase.
• Confirm the conclusion on the internal controls design effectiveness.
• Execute and lead the internal audit plan.
• Ensure sufficient documentation is complete and filed Perform on the job detailed review of the working papers.
• Perform the detailed review and confirmation of issues raised and management response and recommend if the issue is to be included or excluded from the final IT audit report.
• Prepare / review and sign off the working papers.

Reporting of Audit:

• Prepare the draft internal audit report.
• Identify gaps between actual and expected performance.
• Ensure the proper wording of the report to avoid any use of inappropriate language.
• Prepare the rating and prioritization of the points reported.
• Obtain and document the management comments in the report.
• Arrange and lead the closing meeting with the respective process owner(s).
• Prepare the final report to be issued to the respective process owner(s).
• Conduct follow up assignments to ensure proper implementation of the corrective actions agreed in the internal audit report.

Key Requirements and Qualifications

Following are the requirements for the role of IT Audit Lead at Daman:

• Bachelor’s degree in Finance, Accounting, Business Administration, Computer Science or other relevant field.

OR

• High School with Association of Chartered Certified Accountants (ACCA) certification.
• Certified Information Systems Auditor (CISA).
• 7+ years of experience in IT auditing, of which 3+ years in supervisory/ management role.
• Experience working in any Big 4 companies is preferred.

Skills & Competencies

In depth knowledge of the following technologies and related standards, protocols and security requirements:

• Operating systems – Windows; Network technologies, Web-based technologies, Databases – MS.
• SQL and Oracle: knowledge of Oracle E Business Suite and Hyperion strongly preferred.
• COBIT control framework.. ISO27001 Information security management standard and framework and ITIL framework.
• NESA standards.
• IT data analytics (CAATs etc.)
• IT GRC standards.
• Energetic, entrepreneurial, self-starter and capable of self-direction Strategic thinking with strong focus on results and able to “think out of the box”.
• Strong leadership skills including people management, selection and development skills.
• Excellent command of written/spoken English; knowledge of Arabic language is an added advantage.
• Strong analytical, planning, forecasting, execution and problem-solving skills.
• Strong level of customer service orientation and professionalism in all interactions.
• Able to communicate effectively and strong negotiation and presentation skills.

Manager IT Audit, National Bank of Fujairah

Senior Sales Officer Daman Abu Dhabi