IT Audit

About the Role

Emdad By Elm is seeking an IT Audit professional to join their team in Riyadh, Saudi Arabia. This full-time role supports the Internal Audit function by providing independent and objective assurance over IT systems, cybersecurity controls, and digital initiatives. The position focuses on assessing the adequacy and effectiveness of IT governance, information security, cyber resilience, and technology-enabled processes.

Role Purpose and Contribution

The IT Audit role ensures alignment with regulatory requirements, organizational policies, and strategic objectives. This position contributes to strengthening the organization’s control environment, managing technology risks, and enhancing trust in digital services and platforms.

Key Responsibilities

• Plan and execute IT and cybersecurity audits in accordance with the approved audit plan and internal audit methodology.
• Assess General IT Controls (ITGCs), application controls, and cybersecurity controls across systems, platforms, and infrastructure.
• Evaluate compliance with relevant frameworks and standards, such as NCA, ISO 27001, and COBIT.
• Conduct IT and cyber audit engagements.
• Review IT governance, security controls, and compliance with applicable frameworks.
• Assess risks and identify control weaknesses.

Audit Reporting and Follow-up

• Prepare clear and concise audit reports that highlight observations, root causes, risks, and practical recommendations.
• Track management action plans and validate the timely and effective closure of audit issues.
• Monitor remediation plans and verify issue closure.

Stakeholder Engagement and Continuous Improvement

• Engage with IT, cybersecurity, and business stakeholders to understand systems, processes, and risk exposures.
• Provide advisory input on control design for new systems, digital initiatives, and major IT projects when required.
• Collaborate with key stakeholders throughout audit engagements.
• Support management with advisory services on IT control design.
• Stay updated on emerging technology and cyber risks, regulatory changes, and leading audit practices.
• Contribute to the enhancement of IT audit tools, techniques, and methodologies.
• Monitor industry trends and regulatory developments.
• Enhance audit methodologies and leverage new audit techniques.

Qualifications and Experience

Candidates should possess 5-10 years of relevant experience in IT audit or a related field. The salary for this position will be disclosed during the hiring process.