IT Audit Manager

Hala; Saudi Arabia; On-site; SAR 320,000 - 480,000; Full time

Job summary

HALA is seeking an IT Audit Manager in Saudi Arabia to lead risk-based IT audits across ITGC, cybersecurity, BCM, and related technology-enabled processes. You will plan engagements, assess control effectiveness, review regulatory compliance, and advise on remediation with senior management input.

The role requires strong stakeholder management, data-driven insight, and the ability to improve cyber resilience and governance across HALA's technology landscape.

Qualifications

• Experience planning and executing risk-based IT audits across ITGCs, cybersecurity, BCM and cloud.
• Ability to assess regulatory requirements and provide concrete remediation recommendations.
• Strong communication with senior management and stakeholders.

Responsibilities

• Plan and execute IT audit engagements across ITGC, cybersecurity, BCM, DR.
• Evaluate design and operating effectiveness of controls and report findings.
• Assess regulatory compliance and align with industry standards.
• Provide advisory services on technology initiatives and digital projects.
• Monitor remediation actions and validate effectiveness.

Skills

IT Audit

Risk-based audits

ITGC & cybersecurity

BCM & DR

Regulatory compliance

Stakeholder communication

Data analytics

Tools

SAMA CSF

NIST CSF

ISO/IEC 27001

COBIT

PCI DSS

SWIFT CSCF

Job description

Who Are We

HALA is a leading fintech player in the MENAP region that aims to redefine financial services and build the future bank of SMEs HALA aims at empowering SMEs to start run and grow their businesses by providing them with cutting-edge financial and technological tools HALA currently holds multiple entities in UAE Saudi Arabia and Egypt including HALA Payments and HALA Logistics and offers solutions that enable merchants to digitize their payments as well as manage their sales and operations Founded in 2017 HALA is currently licensed by the Saudi Arabian Central Bank

Objective

We are seeking IT Audit Manager to join our team and lead audits across Information Technology Cybersecurity Business Continuity Management BCM and other technology-enabled business processes The Senior IT Auditor will be responsible for planning and executing risk-based audits evaluating the design and operating effectiveness of IT general controls ITGCs cybersecurity controls technology governance cloud environments business continuity and disaster recovery capabilities and regulatory compliance The role also involves identifying technology risks and control deficiencies assessing their impact on the organization and providing practical recommendations to strengthen governance enhance cyber resilience improve operational effectiveness and support compliance with applicable regulatory requirements and industry standards

Responsibilities

Plan and execute risk-based IT audit engagements including IT General Controls ITGC cybersecurity cloud computing digital platforms data governance business continuity management BCM disaster recovery DR third-party risk and technology-enabled business processes Perform audit planning activities including risk assessments audit scoping control identification and development of audit programs and testing procedures Evaluate the design and operating effectiveness of IT controls identify technology risks and control deficiencies and provide practical recommendations to strengthen governance security resilience and operational effectiveness Assess compliance with applicable regulatory requirements internal policies and recognized industry frameworks and standards including SAMA Cybersecurity Framework CSF SAMA BCM Framework PCI DSS ISO IEC 27001 COBIT NIST Cybersecurity Framework SWIFT CSCF where applicable and other relevant technology risk and security standards Conduct interviews and walkthroughs with business and technology stakeholders to obtain an understanding of IT processes systems applications infrastructure and associated controls Prepare clear concise and evidence-based audit reports working papers and executive presentations that effectively communicate audit observations risk implications and actionable recommendations Present audit findings and recommendations to senior management and facilitate discussions to obtain agreement on corrective action plans Monitor and validate the implementation of agreed management actions through periodic follow-up reviews and provide independent assurance over the effectiveness of remediation activities including validation of regulatory observations where required Build and maintain effective working relationships with business units technology teams risk management compliance and external stakeholders while preserving audit independence and objectivity Stay abreast of emerging technology risks cybersecurity threats evolving regulatory requirements and changes to applicable auditing governance and security standards Provide advisory and consulting services on technology initiatives digital transformation projects system implementations and other ad hoc reviews while maintaining the independence of the Internal Audit function Contribute to the continuous enhancement of the Internal Audit methodology including the adoption of data analytics continuous auditing techniques and technology-enabled audit tools

Responsibilities

Plan and execute risk-based IT audit engagements, including IT General Controls (ITGC), cybersecurity, cloud computing, digital platforms, data governance, business continuity management (BCM), disaster recovery (DR), third-party risk, and technology-enabled business processes.Perform audit planning activities, including risk assessments, audit scoping, control identification, and development of audit programs and testing procedures.Evaluate the design and operating effectiveness of IT controls, identify technology risks and control deficiencies, and provide practical recommendations to strengthen governance, security, resilience, and operational effectiveness.Assess compliance with applicable regulatory requirements, internal policies, and recognized industry frameworks and standards, including SAMA Cybersecurity Framework (CSF), SAMA BCM Framework, PCI DSS, ISO/IEC 27001, COBIT, NIST Cybersecurity Framework, SWIFT CSCF (where applicable), and other relevant technology risk and security standards.Conduct interviews and walkthroughs with business and technology stakeholders to obtain an understanding of IT processes, systems, applications, infrastructure, and associated controls.Prepare clear, concise, and evidence-based audit reports, working papers, and executive presentations that effectively communicate audit observations, risk implications, and actionable recommendations.Present audit findings and recommendations to senior management and facilitate discussions to obtain agreement on corrective action plans.Monitor and validate the implementation of agreed management actions through periodic follow-up reviews and provide independent assurance over the effectiveness of remediation activities, including validation of regulatory observations where required.Build and maintain effective working relationships with business units, technology teams, risk management, compliance, and external stakeholders while preserving audit independence and objectivity.Stay abreast of emerging technology risks, cybersecurity threats, evolving regulatory requirements, and changes to applicable auditing, governance, and security standards.Provide advisory and consulting services on technology initiatives, digital transformation projects, system implementations, and other ad hoc reviews, while maintaining the independence of the Internal Audit function.Contribute to the continuous enhancement of the Internal Audit methodology, including the adoption of data analytics, continuous auditing techniques, and technology-enabled audit tools.