IT & Cybersecurity Audit Lead

تابي; Riyadh; On-site; SAR 200,000 - 420,000; Full time

Benefits offered by this job

Health insurance

Job summary

Tabby is seeking an Audit Lead – IT & Cyber Security to guide end-to-end IT and cyber security audits, supervise engagement teams, and deliver high-quality results aligned with the technology risk-based audit plan. You will coordinate with process owners, develop audit programs and RCMs, review fieldwork, and report findings to engineering and information security stakeholders, ensuring timely remediation.

The role requires strong communication, knowledge of IT controls, cloud security, and a

Qualifications

• 5+ years of IT audit, information security or technology risk experience, with leading engagements.
• Experience in banking/fintech or corporate environments preferred.
• Strong understanding of IT controls and cybersecurity frameworks.

Responsibilities

• Lead planning and execution of IT general controls, application controls, and cybersecurity audits.
• Develop audit programs and risk matrices covering IT and cyber risk areas.
• Supervise fieldwork of auditors and interns, ensuring quality and methodology adherence.
• Conduct walkthroughs and testing of IT controls, IAM, and cloud configurations.
• Draft audit findings with actionable remediation recommendations.
• Present results to process owners and stakeholders in Engineering and Information Security.
• Coordinate remediation timelines and track implementation progress.
• Contribute to annual tech risk assessments for assigned systems.

Skills

IT audit

information security

technology risk

IT general controls

communication

cloud security

audit tools

SAMA requirements

Education

Bachelor's degree in Computer Science or related

CISA (in progress/desirable)

Tools

IT audit tools

Cloud platforms AWS/Azure/GCP

Job description

Tabby is seeking an Audit Lead – IT & Cyber Security to guide end-to-end IT and cyber security audits, supervise engagement teams, and deliver high-quality results aligned with the technology risk-based audit plan. You will coordinate with process owners, develop audit programs and RCMs, review fieldwork, and report findings to engineering and information security stakeholders, ensuring timely remediation.

The role requires strong communication, knowledge of IT controls, cloud security, and a