Cybersecurity Audit Consultant

exequt MENA; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Benefits offered by this job

One year contract

Job summary

ExeQut is seeking a Senior Consultant in Cybersecurity Audit to join our IT audit team. You will lead assessments of application-level controls across ERP and business applications, including SAP, Oracle, and Microsoft Dynamics, ensuring data integrity and compliance.

You will evaluate SoD, user access design, IT-dependent controls, and remediation actions, aligning findings with COBIT, ISO/IEC 27001, and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL).

Qualifications

• Bachelor's degree in CS/IS/AIS or related field.
• 4–6 years in application controls auditing, ERP security, or IT audit.
• Hands-on auditing/configuring SAP, Oracle, or Microsoft Dynamics incl. SoD and access controls.

Responsibilities

• Plan and execute application controls reviews across ERP and business applications (e.g., SAP, Oracle, Microsoft Dynamics).
• Assess segregation of duties (SoD), user access design, and sensitive access; evaluate remediation controls.
• Test automated and IT-dependent controls; evaluate interfaces and data integrity between systems.
• Support cybersecurity audits by linking application findings to broader risk.
• Evaluate controls against COBIT, ISO/IEC 27001 and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL).
• Draft findings, risk ratings, and practical recommendations; coordinate with client owners.
• Contribute to methodology and testing tools; share knowledge for application controls.

Skills

Communication skills

Analytical skills

Documentation

Education

Bachelor's degree in Computer Science, Information Systems, Accounting Information Systems, or related discipline

Tools

SAP

Oracle

Microsoft Dynamics

Job description

Company Overview

ExeQut is consulting done right. We are a trusted vendor for enterprise apps and portals, and our proprietary development process enables us to deliver on time, avoid common design mistakes, and reduce the total life-cycle cost of ownership. At ExeQut, we prioritize understanding core business issues and developing solutions that add immediate value. Transparency and communication are the cornerstones of our approach. Our projects are partnerships, ensuring that clients are involved in every step of the journey, from inception to completion.

Company Overview

ExeQut is consulting done right. We are a trusted vendor for enterprise apps and portals, and our proprietary development process enables us to deliver on time, avoid common design mistakes, and reduce the total life-cycle cost of ownership. At ExeQut, we prioritize understanding core business issues and developing solutions that add immediate value. Transparency and communication are the cornerstones of our approach. Our projects are partnerships, ensuring that clients are involved in every step of the journey, from inception to completion.

Job Description

We are looking for a Senior Consultant in Cybersecurity Audit to join our IT audit team. In this role, you will lead the assessment of application-level controls, automated business-process controls, and interface and data-integrity controls across enterprise applications such as SAP, Oracle, and Microsoft Dynamics, working closely with the wider IT audit team.

Key Responsibilities

• Plan and execute application controls reviews across ERP and business applications (e.g., SAP, Oracle, Microsoft Dynamics), including configurable controls, automated controls, and key reports.
• Assess segregation of duties (SoD), user access and authorization design, and sensitive access within enterprise applications, and evaluate related remediation and mitigating controls.
• Test automated business-process controls and IT-dependent manual controls, and evaluate interface, data-conversion, and data-integrity controls between systems.
• Support cybersecurity audits by linking application-layer findings to broader technology and financial reporting risk.
• Evaluate application controls against COBIT and ISO/IEC 27001 and relevant Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL), and document evidence to a review-ready standard.
• Draft findings, risk ratings, and practical recommendations, and coordinate with client application, IT, and business-process owners.
• Contribute to methodology, testing tools, and knowledge sharing for the application controls capability.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Accounting Information Systems, or a related discipline.
• 4-6 years of experience in application controls auditing, ERP security, or IT audit.
• Hands-on experience auditing or configuring at least one major ERP (SAP, Oracle, or Microsoft Dynamics), including SoD and access controls.
• Working knowledge of application controls, automated controls, and IT audit frameworks (COBIT, ISO 27001) and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL).
• Strong documentation, analysis, and communication skills, with the ability to translate technical findings into practical business recommendations.

Nice to have

• Professional certification such as CISA (held or in progress).
• ERP-specific credentials, CISM, or CRISC are an advantage.

Additional Information

• Role Type: One Year Contract.

Join ExeQut and be part of a dynamic team ensuring data integrity and accessibility for business success