Senior Information Technology Auditor
Riyadh, Riyadh Province, Saudi Arabia · Full Time
Be the first to apply
- Experience
- 7–10 yrs
- Salary
- —
- Openings
- 1
- Posted
- 4 weeks ago
- Work mode
- In office
- Education
- Bachelor's degree
- Resume
- Required to apply
Where you'll work
Sign in to tell us what does and doesn't work for you here — it sharpens every match we show you.
Job description
About the Role
This position involves supporting the execution of audits focused on technology and cyber security. The objective is to evaluate the efficiency of IT governance, information security controls, cyber resilience, infrastructure, applications, cloud environments, and technology operations. The auditor ensures that technology-related risks are properly handled and that regulatory standards are met, providing independent assurance.
Core Responsibilities
- Plan and conduct technology and cyber security audits aligned with the approved audit schedule.
- Assess how well IT general controls and application controls are designed and operating.
- Examine cyber security governance and domains such as identity and access management, network and endpoint security, cloud security, vulnerability management, incident response, and security monitoring.
- Review IT infrastructure components including databases, operating systems, cloud platforms, and controls for disaster recovery or business continuity.
- Evaluate adherence to regulatory obligations, internal policies, and recognized standards like the SAMA Cyber Security Framework, NCA ECC, ISO 27001, and NIST.
- Conduct risk assessments to find control weaknesses and suggest practical enhancements.
- Document audit work thoroughly through working papers, reports, and management presentations.
- Track audit findings and verify that agreed-upon corrective actions have been completed.
- Assist with investigations, special review assignments, and advisory projects related to technology and cyber security.
- Keep abreast of new cyber threats, technology risks, and best audit methodologies.
Required Qualifications and Experience
- A bachelor's degree in Computer Science, Information Technology, Cyber Security, Information Systems, or a comparable field.
- Holding relevant professional certifications is advantageous.
- Between seven and ten years of professional experience in IT Audit, Cyber Security Audit, Information Security, or Technology Risk roles.
- Prior experience in banking, financial services, or other regulated industries is strongly preferred.