Cybersecurity Audit Consultant

ExeQut AI Consulting; Riyadh; On-site; SAR 200,000 - 320,000; Full time

Job summary

ExeQut AI Consulting seeks a Senior Consultant in Cybersecurity Audit to lead assessments of application-level controls across ERP and enterprise apps (SAP, Oracle, Microsoft Dynamics). You will work with the IT audit team to ensure control effectiveness and regulatory alignment.

Responsibilities include planning reviews, testing SoD and access controls, documenting findings with risk ratings, and delivering practical remediation recommendations.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Accounting Information Systems, or a related discipline.
• Hands-on auditing or configuring at least one major ERP (SAP, Oracle, or Microsoft Dynamics) including SoD and access controls.
• Working knowledge of application controls, automated controls, and IT audit frameworks (COBIT, ISO 27001) and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL).
• Strong documentation, analysis, and communication skills with the ability to translate technical findings into practical business recommendations.

Responsibilities

• Plan and execute application controls reviews across ERP and business applications including SAP, Oracle, and Microsoft Dynamics.
• Assess SoD, user access, and authorization design and sensitive access in enterprise applications.
• Test automated controls and IT-dependent manual controls; evaluate data integrity across interfaces.
• Draft findings, risk ratings, and recommendations; coordinate with client owners.
• Contribute to methodology, testing tools, and knowledge sharing for application controls.

Skills

Documentation & communication

Risk assessment

Regulatory compliance

Education

Bachelor's degree in Computer Science

Tools

SAP

Oracle

Microsoft Dynamics

COBIT

ISO 27001

Job description

Job Description

We are looking for a Senior Consultant in Cybersecurity Audit to join our IT audit team. In this role you will lead the assessment of application-level controls, automated business-process controls, and interface and data-integrity controls across enterprise applications such as SAP, Oracle, and Microsoft Dynamics, working closely with the wider IT audit team.

Key Responsibilities

Plan and execute application controls reviews across ERP and business applications e g SAP Oracle Microsoft Dynamics including configurable controls automated controls and key reports Assess segregation of duties SoD user access and authorization design and sensitive access within enterprise applications and evaluate related remediation and mitigating controls Test automated business-process controls and IT-dependent manual controls and evaluate interface data-conversion and data-integrity controls between systems Support cybersecurity audits by linking application-layer findings to broader technology and financial reporting risk Evaluate application controls against COBIT and ISO IEC 27001 and relevant Saudi regulatory requirements SAMA CSF NCA ECC PDPL and document evidence to a review-ready standard Draft findings risk ratings and practical recommendations and coordinate with client application IT and business-process owners Contribute to methodology testing tools and knowledge sharing for the application controls capability

Requirements

Bachelor's degree in Computer Science Information Systems Accounting Information Systems or a related discipline Hands-on experience auditing or configuring at least one major ERP SAP Oracle or Microsoft Dynamics including SoD and access controls Working knowledge of application controls automated controls and IT audit frameworks COBIT ISO 27001 and Saudi regulatory requirements SAMA CSF NCA ECC PDPL Strong documentation analysis and communication skills with the ability to translate technical findings into practical business recommendations

Nice to have

Professional certification such as CISA held or in progress ERP-specific credentials CISM or CRISC are an advantage Bachelor's degree in Computer Science, Information Systems, Accounting Information Systems, or a related discipline. 4-6 years of experience in application controls auditing, ERP security, or IT audit. Hands-on experience auditing or configuring at least one major ERP (SAP, Oracle, or Microsoft Dynamics), including SoD and access controls. Working knowledge of application controls, automated controls, and IT audit frameworks (COBIT, ISO 27001) and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL). Strong documentation, analysis, and communication skills, with the ability to translate technical findings into practical business recommendations. Professional certification such as CISA (held or in progress). ERP-specific credentials, CISM, or CRISC are an advantage.