Senior Information Technology Auditor

About Meydan Free Zone

Meydan Free Zone facilitates entrepreneurs and start-up ventures to establish and manage their businesses centrally in Dubai, offering access to expert talent, entrepreneurial guidance, and comprehensive start-up support services. Currently expanding, the organization is seeking a proficient Senior IT Internal Auditor to assist the Internal Audit Manager in developing and refining the IT Governance, Risk, and Compliance (GRC) framework.

Key Responsibilities

• Perform risk-based IT audits assessing the effectiveness of IT General Controls (ITGCs), application controls, and governance mechanisms.
• Create, update, and assess IT policies, standards, and governance documentation aligned with ISO 27001, DESC ISR, and other regulatory standards.
• Maintain the IT risk register, conduct Business Impact Analysis (BIA), and assist with technology and third-party risk evaluations.
• Organize and coordinate both internal and external IT audits, including ISO 27001 surveillance and regulatory inspections, ensuring proper evidence gathering, remediation monitoring, and audit preparedness.
• Lead and oversee Vulnerability Assessment and Penetration Testing (VAPT) processes to guarantee timely resolution of identified vulnerabilities.
• Support vendor security and compliance evaluations by reviewing security certifications, SOC reports, and contract requirements.
• Compile compliance dashboards, audit reports, and updates for management while managing centralized compliance records.
• Advocate for information security awareness and assist in Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP) activities, including testing.

Required Qualifications and Experience

• A bachelor's degree in Information Technology, Computer Science, Information Security, Cybersecurity, or a closely related discipline.
• Between 4 and 7 years of experience in IT Audit, IT Governance, Risk & Compliance (GRC), or Information Security roles.
• Practical knowledge of ISO/IEC 27001:2022 standards and familiarity with regional regulatory bodies such as the Dubai Electronic Security Center (DESC) ISR.
• Experience with Vulnerability Assessment and Penetration Testing (VAPT) processes, IT risk management tools including risk registers, and handling third-party/vendor risk.
• Strong skills in documentation, report writing, and coordinating with multiple stakeholders.
• Proficient in developing or reviewing IT policies, standard operating procedures (SOPs), and process documentation.
• Deep understanding of information security governance frameworks and control mappings.
• Analytical approach coupled with thorough attention to detail when handling policy and evidence records.
• Effective communication abilities to collaborate with auditors, vendors, IT professionals, and business teams.

Language Requirements

• Fluency in English is essential.
• Knowledge of additional languages is considered advantageous.

Our Vision

We aspire to become the premier hub for entrepreneurship and innovation within the region. Candidates motivated to contribute to this vision are encouraged to apply.