Senior IT Internal Auditor

About Albawani

Albawani, established in 1991, is a prominent construction and contracting company headquartered in Riyadh, Saudi Arabia. The company has developed into a diversified group with operations spanning construction, infrastructure, engineering, water and power, and industrial services. Albawani is recognized for delivering large-scale commercial, healthcare, educational, and government projects across the Kingdom, maintaining a strong commitment to quality, safety, and innovation, evidenced by multiple international ISO certifications and a Class-1 contractor ranking.

The Role: Senior IT Internal Auditor

Albawani is seeking a Senior IT Internal Auditor to join its team in Riyadh, Saudi Arabia. This full-time role involves planning, executing, and leading IT audit engagements across the organization. The Senior IT Internal Auditor will evaluate the effectiveness of IT controls, risk management practices, and governance structures, ensuring compliance with internal policies, regulatory requirements, and industry standards. The role also focuses on identifying risks and recommending improvements to strengthen IT systems, processes, and data security.

Key Responsibilities

• Lead IT audit engagements based on the approved audit plan.
• Develop audit scope, programs, and testing procedures.
• Assess IT general controls (ITGCs), application controls, and system configurations.
• Evaluate user access management, data integrity, and security controls.
• Identify and assess IT risks and their impact on business operations.
• Ensure compliance with internal policies and external standards (ISO 27001, COBIT, NIST).
• Evaluate IT governance frameworks and risk management processes.
• Assess cybersecurity controls and data protection practices.
• Prepare clear and comprehensive audit reports with findings and recommendations.
• Present audit results to management and key stakeholders.
• Monitor and follow up on remediation actions and closure of audit findings.
• Perform data analysis using audit tools (*, ACL, IDEA, Excel).
• Review system logs, integrations, and application controls.
• Assess ERP systems (Oracle, SAP) for control effectiveness and risks.
• Provide advisory support on IT projects and system implementations.
• Recommend control enhancements and process improvements.
• Stay updated on emerging technology risks and audit best practices.

Qualifications and Experience

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• 4–7 years of experience in IT auditing or IT risk.
• Strong experience in IT general controls (ITGC), application controls, and security.
• Experience auditing ERP systems (Oracle, SAP, etc.).
• Knowledge of IT governance, cybersecurity, and infrastructure controls.
• Experience in risk-based audit methodologies.
• Professional certifications, with CISA (Certified Information Systems Auditor) highly preferred, in addition to CIA, CRISC, or CISSP.