{"id":2428724,"url":"https://alion.io/job/estithmar-holding-senior-lead-auditor-it","title":"Senior Lead Auditor - IT","company":{"id":3225703,"name":"Estithmar Holding","domain":"estithmarholding.com","url":"https://alion.io/company/estithmarholding","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":100,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Finance","role_family":"Finance","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Qatar"],"countries":["QA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-01T00:00:00Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-30T13:00:17Z","board_verified":true,"closed_at":null,"days_open":29,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":29},"description":"Job Summary\nThe Senior Lead Auditor - IT executes technology-focused internal audit engagements across Power International Holding and its business groups, providing independent assurance over the design and operating effectiveness of technology, cybersecurity, data protection, and system-control environments.\nReporting to the IT Audit Manager within the Group Internal Audit function, the role evaluates IT general controls, ERP application controls, SAP security and authorizations, segregation of duties, cybersecurity, access management, change management, business continuity, and data governance. The position applies risk-based audit methodologies, data analytics, and professional standards to identify control weaknesses, determine root causes, and communicate practical recommendations to technical and non-technical stakeholders.\nThe role works independently across technical and business-process environments while supporting audit planning, scoping, fieldwork, reporting, remediation tracking, and continuous improvement of the Group IT audit plan.\nJob Responsibilities 1\nIT Audit Planning & Execution\nExecute risk-based IT audit engagements covering IT general controls, application controls, cybersecurity, access management, change management, IT operations, business continuity, disaster recovery, and related technology risks across the Group.\nSupport the IT Audit Manager in defining audit scope, objectives, testing strategies, resource requirements, and engagement timelines in alignment with the approved IT audit plan.\nPerform fieldwork, obtain and evaluate audit evidence, document procedures and conclusions, and maintain complete workpapers in accordance with IIA IPPF and relevant ISACA standards.\nERP, SAP & Application Controls\nPerform ERP-focused audit work covering SAP access controls, role design, authorizations, segregation of duties, master data governance, system configuration, interfaces, workflows, and key automated controls.\nAssess business-process and application-control dependencies across SAP S/4HANA and other critical enterprise systems.\nEvaluate SAP GRC Process Control and access-risk-management arrangements, including mitigating controls and remediation of SoD conflicts.\nRisk & Control Assessment\nDevelop and execute IT-specific Risk Control Matrices, clearly distinguishing design effectiveness from operating effectiveness.\nAssess control objectives, risks, control ownership, evidence requirements, testing frequency, sample selection, exceptions, and residual exposure.\nIdentify control gaps, recurring issues, root causes, and risk concentrations requiring management attention.\nData Analytics & Continuous Auditing\nExtract, reconcile, and analyze data from key business systems to identify anomalies, unauthorized activity, control exceptions, and compliance breaches.\nUse appropriate analytics tools and repeatable audit scripts to strengthen testing coverage, evidence quality, and insight generation.\nValidate the completeness and accuracy of data used for audit testing and document analytical procedures and results.\nAudit Reporting & Stakeholder Engagement\nDraft clear, evidence-based IT audit findings and contribute to audit reports by translating technical issues into concise risk, impact, root-cause, and control language for business stakeholders.\nEngage with IT, Information Security, data owners, system owners, and business-process owners to validate findings and agree practical corrective action plans, owners, and target dates.\nPresent audit observations professionally and respond constructively to technical challenge while maintaining independence and objectivity.\nRemediation, Quality & Knowledge Development\nTrack open findings through remediation closure, assess supporting evidence, and escalate overdue or inadequately addressed actions through the established audit governance process.\nSupport quality assurance activities, methodology improvements, risk assessments, audit-universe updates, and development of reusable IT audit programs.\nMaintain current knowledge of technology risk, cybersecurity, privacy, SAP controls, regulatory expectations, and emerging audit practices.\nJob Responsibilities 2\nAdditional Responsibilities 3\nJob Knowledge & Skills\nTechnology Risk & Control Knowledge: Strong understanding of IT general controls, application controls, cybersecurity, data protection, privacy, business continuity, and technology governance.\nAudit Methodology & Professional Standards: Working knowledge of risk-based auditing, Risk Control Matrices, design and operating effectiveness testing, IIA IPPF, ISACA guidance, and relevant assurance practices.\nAnalytical Thinking & Professional Judgment: Ability to assess complex technical and business-process environments, identify root causes, evaluate risk significance, and reach evidence-based conclusions.\nStakeholder Communication & Report Writing: Strong written and verbal communication skills with the ability to translate technical findings into clear business risk and control language for non-technical audiences.\nIndependent Delivery & Collaboration: Ability to manage assigned engagements with limited supervision while collaborating effectively with audit colleagues, IT teams, Information Security, and business-process owners.\nJob Experience\nProfessional Experience: Minimum 5 years of relevant experience in IT audit, information security, technology risk management, IT controls, or a closely related assurance discipline.\nIT General Controls: Demonstrated hands-on experience testing access management, change management, IT operations, system development, backup, recovery, and business continuity controls.\nERP & SAP Controls: Practical experience auditing ERP application controls, SAP security and authorizations, segregation of duties, master data, workflows, and configurable controls, preferably within SAP S/4HANA.\nSAP Functional Background: SAP Functional Analysts with expert SAP configuration and business-process knowledge who are prepared to specialize in SAP IT audit and control testing may be considered.\nAudit Delivery: Experience independently planning and executing fieldwork, maintaining audit workpapers, drafting findings, and validating management remediation.\nCompetencies\nAgility\nAI Fluency\nBuild High-Performing Teams\nBusiness Understanding & process analysis L3\nData analysis L3_1141677111\nFinancial Analysis tools and techniques L3\nGovernance, IA and control tools and techniques L3\nLeadership_321977503\nProvide Direction\nQuality_321977507\nResilience\nRisk analysis & control assessment techniques L3\n Education\nBachelor's Degree in Information Technology\nProfessional Qualification in any related field or Certified Internal Auditor (CIA)","description_format":"text","description_chars":6728,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Hospitals & Health Systems","Information Security","Facilities Management","Construction"],"lifecycle":[{"event":"open","at":"2026-10-13T08:19:44Z"}],"visa":[],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.622,"p_room":0.35,"age_days":29,"expected_fill_days":12,"reasons":["conf:5","velocity","win:tail","comp:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/estithmar-holding-senior-lead-auditor-it","json_url":"https://alion.io/job/estithmar-holding-senior-lead-auditor-it.json","meta":{"generated_at":"2026-10-30T17:28:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6016,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3225703},"rest":"https://alion.io/mcp/rest/get_company?id=3225703"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Festithmar-holding-senior-lead-auditor-it"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Festithmar-holding-senior-lead-auditor-it"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Festithmar-holding-senior-lead-auditor-it"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/estithmar-holding-senior-lead-auditor-it\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Festithmar-holding-senior-lead-auditor-it"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2428724}},{"tool":"search_jobs","arguments":{"company":"estithmarholding.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2428724},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}