IT & Cybersecurity Auditor📣 Job Ad

About the Role

OptiClaim is seeking an IT & Cybersecurity Auditor to join its team in Riyadh. This full-time position involves assessing IT infrastructure, cybersecurity controls, and IT General Controls (ITGC), along with technology risks and governance processes. The auditor will evaluate the effectiveness of security controls, identify risks and gaps, and recommend improvements to enhance the organization's cybersecurity posture and compliance.

Key Responsibilities

• Plan and execute IT and cybersecurity audit engagements using risk-based audit methodologies.
• Evaluate the design and operating effectiveness of IT General Controls (ITGC), including logical access, privileged access, password controls, change management, backup/recovery, logging, monitoring, and IT operations.
• Assess cybersecurity controls across network, endpoint, server, database, cloud, and infrastructure environments.
• Review Identity and Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA), and access governance processes.
• Assess vulnerability management, patch management, security monitoring, incident response, threat detection, and Security Operations Center (SOC) capabilities.
• Review network security architecture, including firewalls, segmentation, remote access, VPNs, email security, and secure configuration.
• Evaluate cloud security controls across Azure, AWS, Microsoft 365, Google Cloud Platform (GCP), and hybrid environments.
• Perform technology risk assessments to identify control deficiencies and improvement opportunities.
• Assess compliance with internal policies, regulatory requirements, and cybersecurity frameworks.
• Prepare audit working papers, risk assessments, reports, and executive presentations.
• Monitor and validate remediation actions, verifying the closure of audit observations.
• Collaborate with IT, Information Security, Risk Management, Internal Audit, and business stakeholders.

Experience and Qualifications

• 10–12 years of experience in IT Audit, Cybersecurity Audit, Information Security, Technology Risk, or Internal Audit.
• Strong grounding in IT audit methodologies and risk-based auditing.
• Hands-on experience with ITGC reviews.
• Experience auditing on-premise, cloud, and hybrid environments.

Required Skills and Knowledge

• Strong knowledge across Identity and Access Management (IAM), Privileged Access Management (PAM), network/endpoint/server/OS security, cloud security, Security Operations Center (SOC), vulnerability and patch management, Security Information and Event Management (SIEM), incident response, backup/Disaster Recovery (DR), data protection, and encryption.

Preferred Qualifications

• Familiarity with Azure, AWS, Microsoft 365, Active Directory, Microsoft Entra ID, and VMware.

Application Process

Interested candidates are invited to submit their application for this role.