Key Responsibilities
- Plan and execute risk-based IT audit assignments and prepare Risk and Control Matrices (RCMs) and audit programs.
- Evaluate IT General Controls (ITGCs), including access management, change management, IT operations, backup and recovery.
- Audit ERP systems such as SAP and Oracle, application controls, segregation of duties, networks, databases, and cloud environments.
- Assess IT governance, cybersecurity, data protection, and business continuity controls.
- Evaluate compliance with COBIT, ISO 27001, NIST, NCA Essential Cybersecurity Controls, and Saudi Personal Data Protection Law (PDPL).
- Use data analytics and audit tools to test controls and identify risks.
- Prepare audit reports and presentations for senior management and recommend practical improvements.

## Requirements
- Bachelor's degree in IT, Computer Science, Information Systems, Cybersecurity, or a related field.
- 5–7 years of experience in IT audit or IT risk and controls, including at least 2 years in a senior or supervisory role.
- Experience with a Big Four auditing firm is preferred.
- CISA certification is highly preferred; CISM, CRISC, CISSP, ISO 27001 Lead Auditor, or CIA certifications are an advantage.
- Strong knowledge of ITGCs, ERP systems, cybersecurity frameworks, and Saudi regulatory requirements.
- Experience with audit analytics tools such as ACL, IDEA, SQL, or Power BI.
- Excellent English communication, report-writing, and presentation skills. Arabic is an advantage.

Please Send your resume/CV