Senior Information Technology Auditor

Support the execution of technology and cyber security audits by evaluating the effectiveness of IT governance, information security controls, cyber resilience, infrastructure, applications, cloud environments, and technology operations. The role provides independent assurance that technology risks are appropriately managed and regulatory requirements are met.

Key Responsibilities

• Plan and execute technology and cyber security audits in accordance with the approved annual audit plan.
• Assess the design and operating effectiveness of IT general controls (ITGCs) and application controls.
• Review cyber security governance, identity and access management, network security, endpoint security, cloud security, vulnerability management, incident response, and security monitoring.
• Evaluate IT infrastructure, databases, operating systems, cloud platforms, and disaster recovery/business continuity controls.
• Assess compliance with regulatory requirements, internal policies, and industry standards (e.g., SAMA Cyber Security Framework, NCA ECC, ISO 27001, NIST).
• Perform risk assessments, identify control gaps, and recommend practical improvements.
• Prepare clear audit working papers, reports, and presentations for management.
• Follow up on audit findings and validate the implementation of agreed action plans.
• Support investigations, special reviews, and advisory engagements related to technology and cyber security.
• Stay current with emerging cyber threats, technology risks, and leading audit practices.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, Information Systems, or a related field.
• Relevant professional certifications are preferred.
• 7–10 years of experience in IT Audit, Cyber Security Audit, Information Security, or Technology Risk.
• Experience within banking, financial services, or a regulated environment is highly preferred.