نائب الرئيس للتدقيق والرقابة على الشركات التابعة الدولية

Job Summary

The incumbent will primarily manage audits and oversight covering the International Subsidiaries portfolio as a member of the Group Internal Audit Function. The role provides independent assurance on the effectiveness of governance , risk management and internal control across the enterprise. This includes the critical responsibility of defining, creating, and continually updating the international subsidiaries audit universe, ensuring it accurately reflects the organization's evolving risks, structure and activities of the International Subsidiaries. It also supports the strategic implementation and integration of advanced data analytics tools and continuous auditing techniques across the audit function to enhance efficiency and real-time risk monitoring. This role requires full compliance with the GIAD Group Audit Manual, IIA standards, and all relevant local regulations and industry audit standards. As a member of the Group Internal Audit Function, this role ensures risks related to the international subsidiaries are effectively integrated into the overall audit strategy and contributes to strengthening the organization's resilience against evolving threats.

Main Responsibilities

A. Shareholder & Financial:

- Contribute to the development and execution of the risk-based annual plan that aligns with the Group Internal Audit strategy and helps safeguard critical assets, data, and enhance financial integrity across international subsidiaries operations that underpin the organization's financial operations and shareholder value.

- Assist in identifying significant risks related to international subsidiaries that could lead to financial loss, operational disruption, or reputational damage, providing actionable recommendations to mitigate these risks.

- Assess the efficiency and effectiveness of Subsidiaries investments and operations -related processes.

- Implements KPIs and best practices for the international audit function.

- Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank.

- Act within the limits of the powers delegated to the incumbent

B. Customer (Internal & External):

- Build and maintain strong, independent, and collaborative relationships with relevant business and support function staff and stakeholders across the Group.

- Communicate complex audit findings, risk assessments, and recommendations to the SVP, EVP, GCAE and other senior stakeholders.

- Provide advisory services to subsidiaries management & the Audit Committee members, Subsidiary Head of Audit and business leaders as directed by the SVP and EVP on matters of subsidiaries governance, internal control and risk management.

- To assist (internal) customers in all their queries on Bank’s product and seek solution to their requests.

- Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time.

- Build and maintain strong/effective relationships with related departments/units to achieve the Group’s objectives.

- Provide timely/accurate data to external/internal Auditors, Compliance, Financial Control and Risk when required

- Coordinate effectively with external auditors, international business consultants, and regulatory bodies on assurance activities.

- Coordinate with and provide support to other GIAD International teams where needed and as per EVP – International Audit and GCAE instructions.

C. Internal (Processes, Products, Regulatory):

- Team lead audit engagements for the International Subsidiaries Audit portfolio, including the evaluation of the adequacy and effectiveness of the internal controls, risk management processes, and governance frameworks within international subsidiaries, identify and report on key risks, control weaknesses, and operational inefficiencies specific to international subsidiaries and providing actionable recommendations for improvement. All audit activities must be conducted in full compliance with the GIAD Group Audit Manual, the IIA's International Professional Practices Framework (IPPF), and relevant audit standards. Contribute in liaison with Heads of Audit in International Subsidiaries to the building of effective Internal Audit capabilities by reviewing its annual audit plan, risk assessment, audit universe coverage, and provide feedback advisory specially on high-risk areas as well as ensure alignment with GIAD standards.

- Engagements: On-the ground manager, responsible for executing the audit engagements and ensuring own and teamwork is performed efficiently and effectively and meets GIAD quality standards.

- Planning phase: conducts detailed risk assessments and interviews with auditees to define and document the precise audit scope and work program in the required deliverables (APM, RCM and ToR) addressing the most significant risks.

- Fieldwork phase: Manage and conduct the day-to-day audit activities, prepare progress updates and interim meetings with the auditees, review working papers for accuracy and provide real-time coaching to the audit team.

- Reporting phase: Draft clear and concise draft and final audit reports, ensure audit issues and recommendations are supported by solid evidence, Present audit findings to the auditees to obtain management actions.

- Issue Follow up Phase: Assist the SVP in monitoring the status of open audit issues and management actions. Periodically discuss with management the status of open issues and action and timely identify potential delays and find solutions. Ensure issue closure validation is conducted in accordance with the latest audit methodology.

- Ensure timely and accurate preparation of audit file closure procedures in accordance with the latest audit methodology and standards.

- Collaborate with peers to achieve full coverage of international subsidiaries, support, control and risk functions in the organization.

- Manage a portfolio of complex international subsidiaries audits, assessing the design and operating effectiveness of controls against industry best practices and regulatory requirements.

- Assess the adequacy and effectiveness of the organization's frameworks (e.g. COSO,Basel), and governance structures.

- Identify and report on control weaknesses, , and operational inefficiencies within international subsidiaries environments, providing technically sound and actionable recommendations.

- Ensure the consistent application of audit methodologies, tools, and best practices across all international subsidiaries audit engagements. Continuously refine and update the audit universe by identifying new risks, regulations and business lines ensuring comprehensive and relevant audit coverage.

- Support the strategic integration of data analytics (tools) into the audit practice to enhance risk identification, efficiency, and depth of analysis. Drive the implementation and maturation of continuous auditing capabilities to provide real-time assurance and insights.

D. Learning & Knowledge:

- Support the development of junior team members in a highly specialized team of international audit professionals, fostering expertise in emerging risks e.g., climate change and ESG, AI, blockchain), and data analytics.

- Contribute to setting clear performance objectives during audit engagements and provide constructive feedback to team members.

- Stay abreast of international business trends, evolving global threats, and new technologies to proactively identify emerging risks and adapt audit strategies. This includes actively fostering practical skills in data analytics and continuous auditing techniques within the audit division.

- Proactively identify areas for professional development of self and undertake development activities.

- Seek out opportunities to remain current with all developments in professional field.

- Escalate unresolved grievances or conflicts with team members to the SVP and EVP for resolution.

E. Legal, Regulatory, and Risk Framework Responsibilities:

- Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML & CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy).

- Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks.

- Ensure systematic good outcomes for clients in accordance with Conduct Risk policy.

- Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements.

- Maintain appropriate knowledge to ensure full qualification to undertake the role.

- Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence.

- Attend mandatory (internal and external) seminars as instructed by the Bank.

- Ensure the International Subsidiaries Audit and Oversight function operates in full compliance with all applicable global regulations, data privacy laws (e.g., GDPR, CCPA), Internal control frameworks, and industry standards relevant to the organization's operations.

- This includes strict adherence to the GIAD Group Audit Manual, the IIA Standards, and specific local regulatory requirements.

- Provide insights from audit findings to the EVP to contribute to the enhancement of the organization's enterprise-wide risk management framework.

- Ensure international subsidiaries audit engagements incorporate relevant regulatory compliance requirements and address inherent related compliance risks.

- Contribute to strengthening the organization's overall internal control, governance, and risk management culture.

F. Other:

- Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information.

- Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need-to-know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators.

- Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position

- All other ad hoc duties/activities related to QNB that management might request from time to time.

Education and Experience Requirements

- University graduate preferably with a Major in Banking, Finance, Accounting, Economics, Business Administration, or a related field. Master’s is preferred.

- At least 12 years of progressive experience in internal audit, compliance, or a related field overseeing audits within the international domain, preferably within a highly rated international bank.

- Certifications: Certified Internal Auditor (CIA) is mandatory. Additional certifications such as CISA (Certified Information System Auditor), CPA (Certified Public Accountant), or relevant certifications are highly desirable.

- Technical Skills: Strong understanding of audit methodologies, governance principles, and internal control frameworks; proven expertise in auditing complex global environments, including internal control systems across diverse jurisdictions; strong knowledge of international financial reporting standards (e.g., IFRS) and varying regulatory landscapes; proficiency in audit management software and data analytics tools; familiarity with geopolitical and cross-cultural business dynamics.

- Soft Skills: Exceptional analytical, critical thinking, and problem-solving abilities with a strong technical aptitude; superior verbal and written communication skills, with the ability to translate complex technical issues into understandable business risks for diverse audiences; strong leadership, coaching, and team-building skills for a specialized technical team; high level of integrity, objectivity, and professional scepticism; excellent interpersonal and influencing skills, with the ability to effectively challenge business leaders; demonstrated ability to work independently and collaboratively as part of the Internal Audit Management Team.

- Excellent oral and written communication skills (including report writing) in English and Arabic (preferred).

- Good interpersonal and presentation skills.

- Understanding of the relevant laws, regulations, and practices.

- Ability to make decisions and follow through with initiatives.

- Personal integrity and self-management.

- Planning, organizing, and analytical ability.

- Results oriented.

- Strong analytical skills and the ability to communicate both verbally and in writing with all levels of management