Key Responsibilities
Plan and conduct audits of IT systems, processes, and internal control mechanisms both within the company and at client organizations.
Assess IT infrastructure, information security policies, and internal control frameworks.
Document audit findings, assess associated risks, and develop practical recommendations for improvement.
Evaluate compliance with international standards and frameworks, including ISO 27001, COBIT, ITIL, and other relevant standards.
Prepare comprehensive audit reports and present findings and recommendations to management and relevant stakeholders.
Lead and supervise a small team of IT auditors, ensuring effective execution of audit engagements.
Establish and maintain professional relationships with clients and internal stakeholders and coordinate the overall audit process.
Monitor the implementation of recommendations and corrective actions addressing identified deficiencies.
Contribute to the continuous improvement of audit methodologies, processes, and internal control practices.
Requirements
Minimum 2–3+ years of professional experience in IT audit, information security, or a related field.
Strong knowledge of IT systems, network infrastructure, cybersecurity, and information security principles.
Good understanding of risk assessment and internal control methodologies.
Strong analytical and problem-solving skills, with excellent attention to detail.
Excellent verbal and written communication skills, with the ability to prepare clear and professional audit reports.
Ability to work effectively as part of a team and take ownership of audit engagements and processes.
Fluency in Azerbaijani.
Intermediate to advanced English proficiency is preferred.
Relevant professional certifications such as CISA, ISO 27001 Lead Auditor, or other IT audit/information security certifications are considered an advantage.