Associate Principal Information Technology & Security Audit

About the Role

Elm Company is seeking an Associate Principal - Information Technology & Security Audit to join their team in Riyadh. This full-time role involves conducting internal audits of the company's information technology controls and systems. The successful candidate will manage assigned audit engagements from preplanning through wrap-up, ensuring adherence to company policies and procedures.

Role Purpose and Scope

The primary purpose of this role is to conduct daily internal audits focused on information technology controls and systems. This includes completing all phases of audit engagements in line with established company policies and procedures. The Associate Principal will play a key role in assessing operational effectiveness, information confidentiality, integrity, and availability, as well as compliance with applicable laws and regulations across all company locations.

Key Audit Responsibilities

• Apply risk and control concepts and internal audit standards, identifying potential issues and escalating them to the IT Audit department manager.
• Plan annual audit engagements and estimate completion timelines.
• Map processes, assess risk, and develop comprehensive audit programs.
• Perform audit fieldwork, prepare detailed reports, and discuss findings with process owners in accordance with recommended IIA standards.
• Review processes, applications, networks, databases, operating systems, practices, and procedures against the annual audit plan.
• Audit management, information systems and technologies, IT, and information security across all company locations.
• Assess operational effectiveness, information confidentiality, integrity and availability, and compliance with applicable laws and regulations.

Operational and Policy Duties

• Contribute to continuous improvement initiatives, business-process enhancement, cost reduction, and productivity improvement.
• Assist with the timely and accurate reporting requirements of the Internal Audit department.
• Adhere to departmental policies and procedures, and comply with safety, quality, environmental, and information security standards.

Qualifications and Experience

Candidates should possess 5-10 years of relevant experience in information technology and security audit. The role requires a strong understanding of internal audit standards and risk and control concepts.

Application Process

Elm Company invites qualified candidates to apply for this full-time position in Riyadh. Salary details will be disclosed during the interview process.