IT Application Auditor📣 Job Ad

About the Role

OptiClaim Business Solutions is seeking an IT Application Auditor to support IT application audit engagements for a client in Riyadh, Saudi Arabia. This full-time role involves evaluating application controls, IT General Controls (ITGC), business process controls, application security, and technology risks across various enterprise applications and business-critical systems. The auditor will assess configurations, user access, segregation of duties (SoD), interfaces, and change management processes.

Key Responsibilities

• Conduct risk-based IT application audits across ERP and business applications.
• Review ITGCs, including user access, privileged access, password management, change management, backup/recovery, and logging & monitoring.
• Evaluate application security controls such as authentication, Role-Based Access Control (RBAC), Segregation of Duties (SoD), workflow approvals, and audit trails.
• Assess interfaces, integrations, APIs, and data flow controls.
• Perform user access reviews covering provisioning, de-provisioning, and recertification processes.
• Assess change/release management and deployment processes.
• Review database security controls.
• Identify risks, control gaps, and recommend remediation measures.
• Prepare comprehensive audit documentation, reports, and executive summaries.
• Track remediation actions through to closure.

Required Knowledge and Expertise

• Strong understanding of IT audit methodologies and risk-based auditing principles.
• Expertise in User Access Management (UAM), Identity and Access Management (IAM), Segregation of Duties (SoD), Role-Based Access Control (RBAC), and application configuration controls.
• Knowledge of change/release management, interface, and integration controls.
• Proficiency in database security, logging/audit trails, and backup & recovery procedures.

Enterprise Applications and Compliance Frameworks

• Experience with enterprise applications such as SAP, Oracle EBS, Oracle Fusion Cloud, MS Dynamics 365, Workday, Salesforce, and ServiceNow.
• Familiarity with industry frameworks and standards including COBIT, ISO/IEC 27001, NIST CSF, CIS Controls, and PCI DSS.
• Knowledge of local regulatory frameworks such as NCA ECC, NCA DCC, SAMA CSF, and PDPL.

Qualifications and Certifications

• 5-10 years of experience in IT application auditing or a related field.
• CISA certification is highly preferred.
• Additional certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Auditor are a plus.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, working with OptiClaim's client. The role requires a professional who can operate effectively within a dynamic enterprise environment.