Cybersecurity Audit Consultant

About ExeQut

ExeQut provides consulting services, specializing as a vendor for enterprise applications and portals. The company's development process focuses on timely delivery, avoiding common design issues, and reducing total life-cycle cost of ownership. ExeQut prioritizes understanding core business issues to develop solutions that deliver immediate value, emphasizing transparency and client involvement throughout project partnerships.

Role Overview

ExeQut is seeking a Cybersecurity Audit Consultant to join its IT audit team in Riyadh, Saudi Arabia. This is a one-year contract position requiring 2-5 years of experience. The consultant will lead assessments of application-level controls, automated business-process controls, and interface and data-integrity controls across enterprise applications such as SAP, Oracle, and Microsoft Dynamics, working in collaboration with the wider IT audit team.

Key Responsibilities

• Plan and execute application controls reviews for ERP and business applications (*, SAP, Oracle, Microsoft Dynamics), including configurable controls, automated controls, and key reports.
• Assess segregation of duties (SoD), user access and authorization design, and sensitive access within enterprise applications, and evaluate related remediation and mitigating controls.
• Test automated business-process controls and IT-dependent manual controls, and evaluate interface, data-conversion, and data-integrity controls between systems.
• Support cybersecurity audits by linking application-layer findings to broader technology and financial reporting risks.
• Evaluate application controls against COBIT, ISO/IEC 27001, and relevant Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL), and document evidence to a review-ready standard.
• Draft findings, risk ratings, and practical recommendations, and coordinate with client application, IT, and business-process owners.
• Contribute to methodology, testing tools, and knowledge sharing for the application controls capability.

Required Experience

• A minimum of 2-5 years of experience in cybersecurity audit or a related field.
• Experience with enterprise applications such as SAP, Oracle, and Microsoft Dynamics.
• Familiarity with control frameworks including COBIT, ISO/IEC 27001, SAMA CSF, NCA ECC, and PDPL.

Work Type and Location

This is a contract position for a duration of one year. The role is based in Riyadh, Riyadh, Saudi Arabia.

Application Information

Join ExeQut to contribute to ensuring data integrity and accessibility for business success within a dynamic team.