Senior IT Internal Auditor📣 Job Ad

Role Summary

Albawani | البواني is seeking a Senior IT Internal Auditor to join its team in Riyadh, Saudi Arabia. This full-time role involves planning, executing, and leading IT audit engagements across the organization. The primary objective is to evaluate the effectiveness of IT controls, risk management practices, and governance structures, ensuring compliance with internal policies, regulatory requirements, and industry standards. The auditor will identify risks and recommend improvements to strengthen IT systems, processes, and data security.

Key Responsibilities

• Lead IT audit engagements based on the approved audit plan.
• Develop audit scope, programs, and testing procedures.
• Assess IT general controls (ITGCs), application controls, and system configurations.
• Evaluate user access management, data integrity, and security controls.
• Identify and assess IT risks and their impact on business operations.
• Ensure compliance with internal policies and external standards such as ISO 27001, COBIT, and NIST.
• Evaluate IT governance frameworks and risk management processes.
• Assess cybersecurity controls and data protection practices.
• Prepare clear and comprehensive audit reports with findings and recommendations.
• Present audit results to management and key stakeholders.
• Monitor and follow up on remediation actions and closure of audit findings.
• Perform data analysis using audit tools including ACL, IDEA, and Excel.
• Review system logs, integrations, and application controls.
• Assess ERP systems, such as Oracle and SAP, for control effectiveness and risks.
• Provide advisory support on IT projects and system implementations.
• Recommend control enhancements and process improvements.
• Stay updated on emerging technology risks and audit best practices.

Required Experience

• A minimum of 5 to 10 years of experience in IT auditing.
• Strong experience in IT general controls (ITGC), application controls, and security.
• Demonstrated experience auditing ERP systems, including Oracle and SAP.
• Experience in applying risk-based audit methodologies.

Technical Knowledge and Standards

• Comprehensive knowledge of IT governance, cybersecurity, and infrastructure controls.
• Familiarity with external standards such as ISO 27001, COBIT, and NIST.
• Proficiency in using audit tools for data analysis, including ACL, IDEA, and Excel.

Professional Certifications

• Professional certifications are required.
• CISA (Certified Information Systems Auditor) is highly preferred.
• Other relevant certifications include CIA, CRISC, or CISSP.

Work Environment

This is a full-time position located in Riyadh, Saudi Arabia, offering an opportunity to contribute to the robust IT governance and security framework of Albawani.