About this role
About Us
Network International is the largest Financial Technology company in Middle East and Africa. Payments is our core business where we provide services in more than 50 countries – UAE, Jordan, South Africa, Egypt are some of our key markets. Apart from payments, we provide services on Data and Insights, Lending, Insurance, Risk Solutions, etc. Our core customers are businesses at every scale and segment, though recently we are growing in direct to consumer card segment as well.
Our EVP's
At Network International, we always stay ahead. . In the fast-paced world of financial services, we thrive on innovation, agility, and purposeful collaboration. We invest first in our people, empowering you to make bold decisions, learn fast, and grow your expertise alongside industry leaders. Here, solving complex problems means more than using cutting-edge technology; it’s about creating meaningful value for our customers, together. We foster a culture where trust, accountability, and achievement go hand in hand—because success isn’t just a goal; it’s how we work, every day, as one team.
Job Purpose
The Head of Technology Audit leads the independent assurance function across Network International's technology, cybersecurity, data and digital risk landscape. Based in the United Arab Emirates, the role has Group-wide responsibility for developing and delivering a risk-based technology audit strategy across relevant entities and business units. The role provides independent assurance over IT general controls, cybersecurity, cloud and infrastructure, data governance, technology resilience, digital change and third-party technology risk. The role reports significant themes and assurance outcomes to senior management and the Audit Committee, and works constructively with Technology, Information Security, Risk and business leadership while preserving Internal Audit's independence and objectivity.
Job Accountabilities
AreaResponsibility
Technology Audit Strategy & PlanningOwn and maintain the Group risk-based technology audit strategy, annual plan and technology risk assessment, aligned to enterprise risks, business priorities and applicable regulatory expectations.
Audit Delivery & QualityOversee the scoping, execution, quality review and timely completion of technology audits, thematic reviews and advisory work, and approve reports within delegated authority.
IT General Controls & Digital ChangeProvide assurance over identity and access management, change management, technology operations, system development lifecycle, major programmes, digital transformation and backup and recovery controls.
Infrastructure and CybersecurityAssess cybersecurity governance and controls, including vulnerability and patch management, security monitoring, threat detection, incident response, application security and cyber resilience.
Cloud, Infrastructure & ArchitectureEvaluate cloud governance and security, infrastructure resilience, network and platform controls, architecture risk and the operation of critical technology services.
Data, AI & Emerging TechnologyAssess data governance, privacy, quality, lineage and lifecycle controls, together with risks arising from AI, automation and other emerging technologies.
Third-Party Technology RiskProvide assurance over technology outsourcing, cloud and SaaS providers, critical vendors, concentration risk and the effectiveness of third-party technology risk management.
Operational ResilienceEvaluate technology components of business continuity, disaster recovery, crisis management, resilience testing and recovery arrangements for critical services.
Regulatory AssuranceEnsure the technology audit universe and coverage consider applicable UAE and Group regulatory requirements, including relevant CBUAE requirements, PCI DSS, ISO 27001, NIST and jurisdiction-specific frameworks such as SAMA where applicable.
Reporting & GovernanceReport significant findings, systemic themes, risk ratings and remediation progress to senior technology leadership, executive management and the Audit Committee, with clear escalation of overdue or high-risk matters.
Issue Follow-upOversee the validation and closure of technology audit actions, ensuring remediation is supported by sufficient evidence and addresses the underlying risk and root cause.
Regulatory EngagementSupport Internal Audit responses to technology-related regulatory requests, reviews and examinations, coordinating assurance evidence and follow-up as required.
Team & Co-source LeadershipBuild, lead and develop technology audit capability; set clear quality expectations; manage performance and capacity; and oversee specialist, co-source and outsourced audit providers.
Audit InnovationPromote data analytics, continuous assurance and technology-enabled audit techniques to improve coverage, insight, efficiency and consistency.
Values & Behaviours
Resilience: Remains composed and effective under pressure and adapts to change across a fast-moving, multi-entity environment.
Responsible: Takes ownership and accountability for assurance quality, professional judgement and Internal Audit independence.
Self-driven: Proactively identifies risk, challenges constructively and delivers high-quality outcomes with appropriate autonomy.
Team player: Builds trusted relationships across functions, entities and geographies while maintaining professional objectivity.
NI Values: Puts the customer at the heart of everything we do; builds better every day; moves fast, together; and aims for scale and market leadership.
Experience / Skills Required
Education: Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering or a related discipline. A relevant postgraduate qualification is preferred.
Experience: Minimum 10 years of relevant technology audit, cybersecurity audit or technology risk experience, including substantial responsibility for leading complex audits, teams or a technology assurance portfolio.
Sector background: Strong experience in a regulated payments, banking, fintech or broader financial services environment, ideally across multiple entities or jurisdictions.
Professional certification: CISA or an equivalent recognised technology audit qualification is required. CISSP, CRISC, CIA, cloud security or other relevant certifications are preferred.
Technical knowledge: Strong knowledge of IT general controls, cybersecurity, cloud and infrastructure, technology resilience, data governance, third-party risk, system development and major technology change.
Frameworks and regulation: Working knowledge of relevant UAE and Group regulatory requirements and recognised frameworks, including applicable CBUAE requirements, PCI DSS, ISO 27001, NIST and SAMA frameworks where relevant to the Group footprint.
Audit leadership: Demonstrated ability to lead risk assessments and audit planning; set scope and approach; review audit quality; approve clear, evidence-based reporting; and oversee remediation validation.
Stakeholder management: Proven ability to engage constructively and independently with senior executives, technology and security leadership, regulators, external assurance providers and Audit Committee stakeholders.
People and supplier leadership: Experience building and developing teams and managing specialist, co-source or outsourced providers, including quality, performance, budget and delivery oversight.
Communication: Strong report writing, influencing and presentation skills, with the ability to translate complex technology risks into clear business and governance implications.
Network International is an equal opportunity employer. We welcome and encourage applications from candidates of all backgrounds, nationalities, and experience levels. We are committed to creating an inclusive workplace where innovation, diversity, and performance thrive.