UWallet - IT Internal Auditor & DPO

Job Purpose The IT Auditor is responsible for independently assessing the adequacy and effectiveness of information technology controls, systems, and processes within a Payment Service Provider (PSP) / eWallet company regulated by the Central Bank of Jordan (CBJ). The role applies a risk-based IT audit approach, focusing on areas of highest risk to payment operations, customer funds, and data, and conducts audits in accordance with professional IT audit standards and best practices to ensure regulatory compliance, operational resilience, and strong technology risk management In addition, the role will act as the Data Protection Officer (DPO), overseeing data protection and privacy compliance, monitoring adherence to applicable data protection requirements, and promoting appropriate protection of personal and customer data across the organization. Responsibility Plan and perform risk-based IT audits, focusing on areas with higher impact on payment operations, customer funds, and information security. Contribute to the development and execution of the risk-based IT audit plan in line with Central Bank of Jordan (CBJ) requirements. Define audit scopes that focus on key technology risks rather than checklist-based compliance. Execute IT audit activities in accordance with IIA Standards and ISACA (CISA) methodologies. Assess compliance with CBJ regulations applicable to PSP and eWallet companies. Support CBJ examinations, regulatory inspections, and audit follow-up actions. Review and assess IT operational processes, including change management, SDLC, disaster recovery, and business continuity planning. Evaluate system availability, monitoring, and incident management effectiveness. Assess the effectiveness of IT general controls, including access management, data protection, encryption, and security monitoring. Review fraud prevention and transaction monitoring controls for electronic payment activities. Perform audits of third-party and outsourced service providers in line with CBJ outsourcing requirements. Prepare clear audit reports, follow up on remediation actions, and escalate unresolved issues through appropriate channels. Monitoring the procedures put in place by the Controller related to Data protection and documenting their compliance with the provisions of this law and related legislations. Ensuring the execution of periodic assessments and reviews of database systems, data processing systems, and systems for maintaining the security, safety, and protection of data, and documenting the assessment results and issuing necessary recommendations for data protection, and monitoring the implementation of these recommendations. Acting as a direct liaison with The Unit and other security and judicial authorities regarding compliance with the provisions of this law. Developing internal instructions for receiving and studying complaints, Data access requests, requests for correction, erasure, hiding, or transfer of Data, and ensuring that such access is provided to the Data Subject in accordance with the provisions of the law Enabling the Data Subject to exercise their rights as provided in this law Organizing necessary training programs for the staff of the Controller and Processors to equip them to handle Data in line with the requirements of this law and the regulations and instructions issued accordingly Any other tasks or responsibilities assigned to the Data Protection Officer in accordance with the provisions of this law and the regulations and instructions issued pursuant to it. Work Experience : a minimum of 3-6 years. Certificates CISA (highly preferred) CISM, CISSP, CRISC (advantage) ISO 27001 Lead Auditor / Implementer (plus) Knowledge And Skills KNOWLEDGE OF: CBJ regulations for PSPs and eWallets Risk-based auditing concepts IT general controls and application controls ISO 27001 COBIT PCI DSS (strong advantage) AML/CFT supporting systems and controls Skills In Strong risk assessment and analytical skills Ability to apply audit judgment in a regulated environment Excellent written and verbal communication skills Ability to translate technical and regulatory requirements into clear audit findings High attention to detail and professional skepticism Show more Show less