Associate Principal - Information Technology & Security Audit

Elm Co; Riyadh; On-site; SAR 300,000 - 420,000; Full time

Job summary

Elm Co seeks an Associate Principal for Information Technology & Security Audit in Riyadh to lead IT audit engagements across the group. The role drives risk assessment, control reviews, and reporting in line with IIA standards and company policies.

The successful candidate will manage end-to-end audits, coordinate with IT and business owners, and ensure data integrity and security across locations, contributing to continuous improvement of processes and practices.

Qualifications

• Bachelor degree in Computer Science or related field.
• Master degree in Business, Finance or IT preferred.
• IT audit certifications: CISA, CRISC, CGEIT, CISM.

Responsibilities

• Oversee day-to-day IT audit engagements from planning to wrap-up.
• Develop audit programs, assess risk, and prepare reports.
• Ensure compliance with IIA standards and internal policies.
• Coordinate with process owners to address issues.
• Maintain information security controls review across locations.

Education

Bachelor degree in Computer Science or related field

Master degree in Business, Finance or IT

Tools

CISA

CRISC

CGEIT

CISM

Job description

Select how often (in days) to receive an alert:

Associate Principal - Information Technology & Security Audit

Date: 5 Oct 2026

Custom Field 1: 722443

Location: Riyadh, SA

Facility: Audit

Job Description

OVERVIEW

Job Title

Job Code

722443

Grade

I4

Group

-

Division

Internal Audit

Department

IT Audit

Unit

Information Technology and Security Audit

ROLE PURPOSE

The aim is to state the overall significance of the job from the organization’s perspective.

Responsible for the day-to-day internal auditing of Elm’s Information Technology audits controls and systems. Also to ensures successful completion of assigned audit engagements, from start to finish, inclusive of preplanning and wrap up activities, according to the policies and procedures followed within ELM

KEY ACCOUNTABILITIES & ACTIVITIES

This section describes the principal outputs required from the job.

Key Accountabilities

Key Activities

Daily Operations

• Follow the day-to-day operations related to own job to ensure continuity of work
• Contribute to the identification of opportunities for continuous improvement of processes and practices taking into account ‘international best practice’
• Improvement of business processes, cost reduction, and productivity improvement
• Assist in the preparation of timely and accurate reports of the Internal Audit department to meet company and department requirements, policies and standards

Auditing procedures

• Ensure that risk & control concepts are applied and internal audit standards to scenarios encountered and identify any potential issues.
• Communicates identified issues with IT Audit department manager to ensure any potential concerns are addressed in a timely and effective manner.
• Planning for the annual audit engagements and measuring estimated timelines for completion.
• Prepare process mapping, conduct risk assessment and develop audit program.
• Perform audit fieldwork, prepare audit reports and conduct a discussion with the process owners as per the recommended IIA standards.
• Review and assesses ELM's processes, technologies (applications, network, database, operating system, etc.) and practices, as well as related procedures according to the annual audit plan.
• Perform management, information systems and technologies, IT and information security audits in all locations of the Company to review and evaluate the effectiveness of operations, confidentiality, integrity and availability of information and compliance with applicable laws and regulations.
• Follow all relevant departmental policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner
• Follow all relevant safety, quality and environmental management policies, procedures and controls to ensure a healthy and safe work environment

Information Security

• Comply with all relevant information Security practices and standards to ensure data integrity and confidentiality

JOB SPECIFICATIONS

Academic and professional qualifications

• Bachelor degree a Computer Science and/or Master Degree in Business, Finance, IT.
• Successfully IT audit related certifications such as CISA, CRISC, CGEIT, CISM.

Years and Nature of Experience

• 6 -8 years of relevant experience in a related industry

Job Segment: Audit, Information Security, Internal Audit, Information Technology, Information Systems, Finance, Technology