Associate, IT Application Audit (Qatarization) Audit & Compliance QNB - Qatar//Doha

Role Overview

Associate, IT Application Audit (Qatarization) with QNB, located in Doha, Qatar. The role sits within the Internal Audit division under Audit & Compliance and is part of the Group Internal Audit Function.

Company Overview

QNB Group was established in 1964 as the country's first Qatari-owned commercial bank and is now the largest bank in the Middle East and Africa (MEA) region. The Group operates through subsidiaries and associate companies in more than 31 countries across three continents, serving up to 20 million customers through 1,000 locations and an ATM network of 4,300 machines. Total employees number more than 28,000. QNB maintains ratings of A from Standard & Poor's, Aa3 from Moody's, and A+ from Fitch, and ranks as the most valuable bank brand in the Middle East and Africa according to Brand Finance Magazine. The bank maintains an active community support program sponsoring social, educational, and sporting events.

Role Purpose

The incumbent will support audits covering the IT Applications Audit portfolio as a member of the Group Internal Audit Function, providing independent assurance on the effectiveness of controls over technology risks, cybersecurity threats, data governance, and digital transformation initiatives across the enterprise. The role supports strategic implementation and integration of advanced data analytics tools and continuous auditing techniques to enhance efficiency and real-time risk monitoring, while ensuring full compliance with the GIAD Group Audit Manual, IIA standards, and all relevant local regulations and industry IT audit standards.

Key Responsibilities

Shareholder & Financial

• Contribute to execution of the risk-based annual plan aligned with Group Internal Audit strategy to safeguard critical IT assets, data, and systems underpinning the organization's financial operations and shareholder value.
• Assist in identifying significant IT and cybersecurity risks that could lead to financial loss, operational disruption, or reputational damage, providing actionable recommendations to mitigate these risks.
• Assess the efficiency and effectiveness of IT investments and technology-related processes.
• Implement KPIs and best practices for the Global IT and Information Security audit function.
• Promote cost consciousness and efficiency and enhance productivity to minimize cost, avoid waste, and optimize benefits for the bank.
• Act within the limits of the powers delegated to the incumbent.
• Demonstrate clear understanding of the drivers behind the bank's financial and non-financial performance.

Customer & Stakeholder Management

• Build and maintain strong, independent, and collaborative relationships with relevant business and support function staff and stakeholders across the Group.
• Communicate complex technical audit findings, cyber risk assessments, and recommendations to the SVP, EVP, GCAE, and other senior stakeholders as directed, translating technical jargon into clear business implications.
• Provide advisory services to IT and business leaders as directed by the SVP and EVP on matters of IT governance, information security, and technology risk management.
• Assist internal customers in all their queries on the Bank's products and seek solutions to their requests.
• Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments and units to achieve improvements in turnaround time.
• Build and maintain strong and effective relationships with related departments and units to achieve the Group's objectives.
• Provide timely and accurate data to external and internal auditors, Compliance, Financial Control, and Risk when required.
• Coordinate effectively with external IT auditors, cybersecurity consultants, and regulatory bodies on technology-related assurance activities.

Audit Execution & Methodology

• Act as a team member on audit engagements for the IT Applications Audit portfolio, including infrastructure, applications, data management, network security, access controls, incident response, and business continuity across all Group entities, conducted in full compliance with the GIAD Group Audit Manual, the IIA's International Professional Practices Framework (IPPF), and relevant ISACA IT audit standards.
• Support the team leader in executing audit engagements and ensuring own work is performed efficiently and effectively and meets GIAD quality standards.
• Support the team leader in conducting detailed risk assessments and interviews with auditees to define and document the precise audit scope and work program in the required deliverables (APM, RCM, and ToR) addressing the most significant risks during the planning phase.
• Conduct testing of assigned scope areas and support the team leader to prepare progress updates and interim meetings with the auditees during the fieldwork phase.
• Draft clear and concise audit issues and recommendations supported by solid evidence during the reporting phase and present audit findings to the auditees to obtain management actions.
• Perform issue closure validation in accordance with the latest audit methodology and timely escalate potential delays to management as needed during the issue follow-up phase.
• Timely conduct audit file closure procedures in accordance with the latest audit methodology and standards.
• Collaborate with peers to achieve full coverage of domestic subsidiaries, support, control, and risk functions in the organization.

Technology Risk & Control Assessment

• Support the delivery of IT application audits, assessing the design and operating effectiveness of technology controls against industry best practices and regulatory requirements.
• Assess the adequacy and effectiveness of the organization's information security frameworks (e.g., ISO 27001, NIST, COBIT), IT governance structures, and disaster recovery capabilities.
• Identify and report on IT control weaknesses, cybersecurity vulnerabilities, and operational inefficiencies within technology environments, providing technically sound and actionable recommendations.
• Ensure the consistent application of IT audit methodologies, tools, and best practices across all IT and Information Security audit engagements.

Data Analytics & Continuous Auditing

• Support the strategic integration of data analytics tools into the audit practice to enhance risk identification, efficiency, and depth of analysis.
• Drive the implementation and maturation of continuous auditing capabilities to provide real-time assurance and insights.

Learning & Development

• Stay abreast of global IT trends, evolving cyber threats, and new technologies to proactively identify emerging risks and adapt audit strategies, including actively fostering practical skills in data analytics and continuous auditing techniques within the audit division.
• Identify areas for professional development of self and undertake development activities.
• Remain current with all developments in the professional field.

Qualifications & Experience

No specific education, years of experience, sector background, or certifications are stated in the source.

Additional Information

• Closing Date: 28 February 2027
• Full details are available on the employer's original posting.