Cybersecurity Audit Consultant

About Exequt

Exequt is a consulting firm specializing in enterprise applications and portals. The company focuses on understanding core business issues to develop solutions that deliver immediate value. Exequt emphasizes transparency and communication, working in partnership with clients throughout project lifecycles.

Role Overview

Exequt is seeking a Cybersecurity Audit Consultant to join its IT audit team in Riyadh. This contract role, with a duration of one year, involves leading assessments of application-level controls, automated business-process controls, and interface and data-integrity controls across various enterprise applications. The consultant will work closely with the broader IT audit team.

Key Responsibilities

• Plan and execute application controls reviews for ERP and business applications such as SAP, Oracle, and Microsoft Dynamics, covering configurable controls, automated controls, and key reports.
• Assess segregation of duties (SoD), user access and authorization design, and sensitive access within enterprise applications, evaluating related remediation and mitigating controls.
• Test automated business-process controls and IT-dependent manual controls, and evaluate interface, data-conversion, and data-integrity controls between systems.
• Support cybersecurity audits by linking application-layer findings to broader technology and financial reporting risks.
• Evaluate application controls against COBIT, ISO/IEC 27001, and relevant Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL), documenting evidence to a review-ready standard.
• Draft findings, assign risk ratings, and propose practical recommendations, coordinating with client application, IT, and business-process owners.
• Contribute to the development of methodology, testing tools, and knowledge sharing for the application controls capability.

Required Experience

Candidates should possess 2-5 years of experience in cybersecurity audit, specifically with a focus on application controls within enterprise environments.

Work Arrangement

This is a contract position for a duration of one year, based in Riyadh.