IT Auditor – Alzayani Investments

Alzayani Investments is a leading investment firm in Bahrain, with a diverse portfolio spanning across various sectors including real estate, hospitality, healthcare, and technology. We are committed to delivering exceptional returns for our stakeholders while upholding the highest standards of corporate governance and ethical practices.

What you will do:

• Conduct thorough and independent audits of our IT systems, processes, and controls to identify potential risks and areas for improvement.
• Develop and implement audit plans, schedules, and procedures in accordance with industry standards and best practices.
• Evaluate the effectiveness of our IT security measures, including firewalls, data encryption, and access controls.
• Assess the reliability and accuracy of our data management processes and systems.
• Review and analyze IT policies and procedures to ensure compliance with regulatory requirements and industry standards.
• Prepare detailed reports of audit findings, including recommendations for improvement and risk mitigation strategies.
• Communicate audit results and recommendations to stakeholders in a clear and professional manner.
• Monitor and follow up on implementation of corrective actions and improvements.
• Stay updated on emerging IT risks and trends and provide guidance and recommendations to mitigate potential threats.

What they do expect from you:

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• Proven work experience as an IT Auditor, preferably in the financial or investment industry.
• Professional certification such as CISA, CISM, or CISSP is highly desirable.
• Strong understanding of IT systems, infrastructure, and security protocols.
• At least five (5) years of experience in IT infrastructure and networks as an administrator.
• Adept in network security such as firewalls, anti-virus, anti-malware, and other similar security tools.
• Understanding of Information Security Management System, Disaster Recovery, and Business Continuity.
• Understanding of cybersecurity.
• Understanding of IT governance.
• Understanding of Risk Management System.
• Appreciation of Software Development Life-cycle.