Associate Principal Information Technology & Security Audit

📣 إعلان

منذ ساعة واحدة تقريباً

	نوع العقد	دوام كامل
	طبيعة الوظيفة	بالموقع
	الموقع	الرياض

وصف الوظيفة

About the Role

Elm Company is seeking an Associate Principal Information Technology & Security Audit to join their team in Riyadh. This full-time role is responsible for the day-to-day internal auditing of Elm’s Information Technology controls and systems. The position ensures the successful completion of assigned audit engagements from start to finish, adhering to established policies and procedures.

Key Responsibilities

Manage daily operations related to internal IT and security audits to ensure work continuity.
Identify opportunities for continuous improvement in audit processes and practices, aligning with international best practices.
Contribute to the improvement of business processes, cost reduction, and productivity.
Assist in preparing timely and accurate reports for the Internal Audit department, meeting company and departmental requirements.
Apply risk and control concepts and internal audit standards to scenarios, identifying potential issues.
Communicate identified issues with the IT Audit department manager to ensure timely and effective resolution.
Plan annual audit engagements and estimate timelines for completion.
Prepare process mapping, conduct risk assessments, and develop audit programs.
Perform audit fieldwork, prepare audit reports, and conduct discussions with process owners in accordance with recommended IIA standards.
Review and assess Elm's processes, technologies (applications, network, database, operating system), and practices, as well as related procedures, according to the annual audit plan.
Conduct management, information systems and technologies, IT, and information security audits across all company locations to evaluate the effectiveness of operations, confidentiality, integrity, availability of information, and compliance with applicable laws and regulations.

Policy and Procedure Adherence

Follow all relevant departmental policies, processes, standard operating procedures, and instructions to ensure controlled and consistent work execution.
Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to maintain a healthy and safe work environment.
Adhere to all relevant information security practices and standards to ensure data integrity and confidentiality.