Cybersecurity Audit Consultant

About ExeQut

ExeQut is a consulting firm specializing in enterprise applications and portals. The company focuses on understanding core business issues to develop solutions that deliver immediate value. ExeQut emphasizes transparency and communication, ensuring client involvement throughout project lifecycles, from inception to completion.

Role Overview

ExeQut is seeking a Cybersecurity Audit Consultant to join its IT audit team in Riyadh, Saudi Arabia. This is a one-year contract position requiring 2-5 years of experience. The consultant will lead assessments of application-level controls, automated business-process controls, and interface and data-integrity controls across various enterprise applications.

Key Responsibilities

• Plan and execute application controls reviews for ERP and business applications (*, SAP, Oracle, Microsoft Dynamics), including configurable controls, automated controls, and key reports.
• Assess segregation of duties (SoD), user access and authorization design, and sensitive access within enterprise applications, evaluating related remediation and mitigating controls.
• Test automated business-process controls and IT-dependent manual controls, and evaluate interface, data-conversion, and data-integrity controls between systems.
• Support cybersecurity audits by linking application-layer findings to broader technology and financial reporting risks.
• Evaluate application controls against COBIT, ISO/IEC 27001, and relevant Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL), documenting evidence to a review-ready standard.
• Draft findings, risk ratings, and practical recommendations, coordinating with client application, IT, and business-process owners.
• Contribute to methodology, testing tools, and knowledge sharing for the application controls capability.

Required Experience

• 2-5 years of experience in cybersecurity audit or a related field.
• Experience with enterprise applications such as SAP, Oracle, and Microsoft Dynamics.
• Familiarity with control frameworks including COBIT, ISO/IEC 27001, SAMA CSF, NCA ECC, and PDPL.

Work Environment

This role is based in Riyadh, Riyadh, Saudi Arabia, and involves working closely with the wider IT audit team. The position is offered as a one-year contract.

Application

Join ExeQut to contribute to ensuring data integrity and accessibility for business success within a dynamic team.