QNB-Associate, Information Security Audit; Qatarization

Job Summary

The incumbent will support audits covering the Information Security Audit portfolio as a member of the Group Internal Audit Function. The role provides independent assurance on the effectiveness of controls over technology risks, cybersecurity threats, data governance, and digital transformation initiatives across the enterprise. It also supports the strategic implementation and integration of advanced data analytics tools and continuous auditing techniques across the audit function to enhance efficiency and real-time risk monitoring.

This role requires full compliance with the GIAD Group Audit Manual, IIA standards, and all relevant local regulations and industry IT audit standards. As a member of the Group Internal Audit Function, this role ensures technology risks are effectively integrated into the overall audit strategy and contributes to strengthening the organization’s resilience against evolving cyber threats.

• Contribute to the execution of the risk-based annual plan that aligns with the Group Internal Audit strategy and helps safeguard critical IT assets, data, and systems that underpin the organization's financial operations and shareholder value.
• Assist in identifying significant IT and cybersecurity risks that could lead to financial loss, operational disruption, or reputational damage, providing actionable recommendations to mitigate these risks.
• Assess the efficiency and effectiveness of IT investments and technology-related processes.
• Implements KPIs and best practices for the Global IT and Information Security audit function.
• Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank.
• Act within the limits of the powers delegated to the incumbent.
• Demonstrate clear understanding of the drivers behind the bank's financial & non-financial performance.

• Build and maintain strong, independent, and collaborative relationships with relevant business and support function staff and stakeholders across the Group.
• Communicate complex technical audit findings, cyber risk assessments, and recommendations to the SVP, EVP, GCAE and other senior stakeholders as directed, translating technical jargon into clear business implications.
• Provide advisory services to IT and business leaders as directed by the SVP and EVP on matters of IT governance, information security, and technology risk management.
• To assist (internal) customers in all their queries on Bank’s product and seek solution to their requests.
• Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn‑around time.
• Build and maintain strong/effective relationships with related departments/units to achieve the Group’s objectives.
• Provide timely/accurate data to external/internal Auditors, Compliance, Financial Control and Risk when required.
• Coordinate effectively with external IT auditors, cybersecurity consultants, and regulatory bodies on technology-related assurance activities.

• Act as a team member on audit engagements for the Information Security Audit portfolio, including infrastructure, applications, data management, network security, access controls, incident response, and business continuity across all Group entities. All audit activities must be conducted in full compliance with the GIAD Group Audit Manual, the IIA's International Professional Practices Framework (IPPF), and relevant ISACA IT audit standards.
• Engagements: support the team leader in executing the audit engagements and ensuring own work is performed efficiently and effectively and meets GIAD quality standards.
• Planning phase: support the team leader in conducting detailed risk assessments and interviews with auditees to define and document the precise audit scope and work program in the required deliverables (APM, RCM and ToR) addressing the most significant risks.
• Fieldwork phase: conduct testing of assigned scope areas and support the team leader to…