Senior Information Technology Auditor📣 Job Ad

About Aljazira Bank

Aljazira Bank is seeking a dedicated professional to join its team in Riyadh, Saudi Arabia. This full-time position offers an opportunity to contribute to the bank's robust technology and cybersecurity framework.

The Role of Senior Information Technology Auditor

The Senior Information Technology Auditor plays a critical role in supporting the execution of technology and cybersecurity audits. This position involves evaluating the effectiveness of IT governance, information security controls, cyber resilience, infrastructure, applications, cloud environments, and technology operations. The primary objective is to provide independent assurance that technology risks are appropriately managed and that all relevant regulatory requirements are met.

Key Responsibilities

• Plan and execute technology and cybersecurity audits in accordance with the approved annual audit plan.
• Assess the design and operating effectiveness of IT general controls (ITGCs) and application controls.
• Review cybersecurity governance, identity and access management, network security, endpoint security, cloud security, vulnerability management, incident response, and security monitoring.
• Evaluate IT infrastructure, databases, operating systems, cloud platforms, and disaster recovery/business continuity controls.
• Assess compliance with regulatory requirements, internal policies, and industry standards such as SAMA Cyber Security Framework, NCA ECC, ISO 27001, and NIST.
• Perform risk assessments, identify control gaps, and recommend practical improvements.
• Prepare clear audit working papers, reports, and presentations for management.
• Follow up on audit findings and validate the implementation of agreed action plans.
• Support investigations, special reviews, and advisory engagements related to technology and cybersecurity.
• Stay current with emerging cyber threats, technology risks, and leading audit practices.

Required Experience and Expertise

Candidates for this role should possess 2 to 5 years of relevant experience in information technology auditing, cybersecurity, or a related field. The position requires a strong understanding of IT governance, information security principles, and cyber resilience strategies. Expertise in evaluating various technology environments, including infrastructure, applications, and cloud platforms, is essential.

Knowledge and Skills

The ideal candidate will demonstrate comprehensive knowledge of IT general controls (ITGCs) and application controls. A solid understanding of cybersecurity domains, including identity and access management, network security, endpoint security, cloud security, vulnerability management, incident response, and security monitoring, is required. Familiarity with industry standards and regulatory frameworks such as the SAMA Cyber Security Framework, NCA ECC, ISO 27001, and NIST is also necessary for effective performance in this role.

Application Information

Interested candidates are invited to apply for this full-time position in Riyadh, Saudi Arabia.