Senior Auditor, IT (Industrial Digital)

Job Purpose

Perform assigned audit engagements in the domain of AI & Emerging Technology assurance, from start to finish, inclusive of preplanning, wrap up activities ensuring application of risk and control concepts to scenarios encountered, and identify any potential issues within ADNOC and Group Companies. Contribute in the capacity of SME, in the periodic Risk Assessments and development of the Risk-Based Work Plans focusing on AI Governance, benefit realization and ROI, and embedded AI lifecycle controls etc. within ADNOC and Group Companies.

KEY ACCOUNTABILITIES:

Job Specific Accountabilities :

Internal Audit Plan

• Develop the audit universe to ensure it covers AI & emerging technology risks in line with other D&T risk areas (such as AI governance, business value realization, third-party dependencies, process, IT/OT infrastructure, interfaces, resilience and cyber security) that could affect the ADNOC Business operations.
• Review and update the AI & Emerging Technology Landscape and Audit Universe.
• Develop and implement Industrial AI Assurance Plan ensuring its alignment with organizational AI strategy, Use-case / initiatives portfolio and new technology rollouts and support other strategic initiatives (such as AI Infrastructure Readiness, and Process enhancements) that impact the group-wide audit plans and oversee the execution to ensure it fulfills the objectives. Coordinate with AGCs and verify for adequacy of coverage of the AI universe and Key AI risks and ensure that AGCs audit plans incorporate the objectives of Group AI Assurance plans.
• Provide relevant business and technology insights into the current, emerging & potential AI / technology issues, trends & opportunities affecting AGCs and BLDs. Provide input for the periodic reporting on AI assurance activities and performance relative to its plans, significant risk exposures, control/governance issues, and other related matters.

Job Specific Accountabilities (Part 2)

Audit Execution

• Perform audits, advisory engagements, and other influencing activities in highly technical areas of current/emerging technologies within ADNOC and Group Companies.
• Develop a detailed audit program / Risk & Control Matrix (RCM) for the assigned AI Assurance engagements, including the objectives, potential risk, key controls, audit procedures, and the use of audit techniques and tools to evaluate governance, risks, and controls processes, and submit audit program to the management for review and approval.
• Ensure that adequate working papers and all relevant information are continuously documented and updated in the automated Audit Management System in accordance with pre-defined templates and audit procedures.
• Identify high-risk areas and key control points across the AI Governance, lifecycle, including model design, training data, validation, deployment, monitoring, access management, explainability, bias, security, compliance, and third-party reliance etc. and whether AI initiatives are delivering intended business value.
• Adapt the audit approach to the rapidly evolving AI landscape and deliver critical and complex technology audits that impact the group-wide internal controls.Audit Reports

• Prepare an audit report with a conclusion, expressing professional opinions on the adequacy and effectiveness of AI governance, risk management, control systems, extent to which AI initiatives are delivering intended value and benefits and the efficiency with which activities are carried out. Recommend improvement options to rectify reported deficiencies for Department Manager’s review.
• Recommend practical enhancements in AI governance, risks, and control processes to assist in the achievement of the company's business objectives.

Job Specific Accountabilities (Part 3)

Coordination

• Provide professional advice on Group Companies’ Audit Committee Charter,  IA Charter and AI Assurance Methodology/Procedures. Provide assistance in the establishment of the Group Audit Committees/IA functions and related governance when assigned.

QUALIFICATIONS, EXPERIENCE, KNOWLEDGE & SKILLS:

Minimum Qualification

• Bachelor's Degree in Computer Science or related Technology discipline or equivalent discipline

Minimum Experience, Knowledge & Skills

• 8-10 years of combined relevant experience in various emerging technology assurance (including automation, data science, artificial intelligence, IoT etc.) related governance and control, with experience evaluating AI and emerging technology-enabled initiatives and their business value realization in a corporate environment. Experience of Oil and Gas operations and associated technology initiatives will be preferable.
• Expertise in developing or reviewing audit/security programs for emerging and new technology risks and challenges.
• Advance knowledge and practical experience in AI-related risks and controls, including model risk, training and inference data governance, bias and fairness, explainability, cybersecurity, privacy, regulatory compliance, and third-party AI dependencies.
• Advance technical knowledge of different AI, Machine Learning and data modelling and ETL Solutions.
• In-depth knowledge of IT General Computing Control and Processes review, including, but not limited to, system development, infrastructure review, access-right management, asset management and change management.
• In-depth knowledge of relevant professional standards and frameworks for technology and AI assurance (e.g. NIST AI Risk Management Framework, ISO 42001 AIMS, OWASP Top 10 for LLM, MITRE ATLAS, COBIT etc,) and their interpretation/application to AI auditing practice.
• Extensive knowledge of planning, project management areas and contracts review.
• Expertise in collecting and analysing complex solution, system integration and data, while evaluating information and systems for possible automation and enhancements.
• Experience in managing and tracking time for different Internal Audit-related activities.

Professional Certifications

• IT audit certification, CISA, is mandatoryor willing to obtain within one year of joining.
• Other related certifications in the domain of AI / ML operations, AI Governance or model risk-related certifications) are preferred.