IT Internal Auditor & Data Protection Officer

About the role

The IT Internal Auditor & DPO will independently assess the adequacy of IT controls and ensure data protection compliance for a PSP/eWallet provider regulated by the Central Bank of Jordan. The role combines risk‑based IT auditing with the responsibilities of a Data Protection Officer.

Key responsibilities

• Plan and execute risk‑based IT audits focusing on payment operations, customer funds, and information security.
• Assess compliance with CBJ regulations, support regulatory examinations, and follow up on audit findings.
• Review IT operational processes such as change management, SDLC, disaster recovery, and business continuity.
• Evaluate IT general controls including access management, encryption, and security monitoring.
• Conduct audits of third‑party service providers and ensure adherence to outsourcing requirements.
• Monitor data‑protection procedures, conduct periodic assessments, and liaise with security and judicial authorities.
• Develop internal instructions for handling data subject requests and organize staff training on data‑protection requirements.

Required profile

• 3–6 years of experience in IT audit, risk assessment, or data‑protection roles.
• Strong knowledge of CBJ regulations for PSPs and eWallets.
• Ability to apply audit judgment in a regulated environment and produce clear audit reports.

Required skills

• CISA certification (highly preferred).
• CISM, CISSP, CRISC certifications (advantage).
• ISO 27001 Lead Auditor / Implementer.
• Familiarity with ISO 27001, COBIT, PCI DSS frameworks.
• Understanding of AML/CFT supporting systems and controls.