IT & Cybersecurity Internal Auditor (2-month Project)

Naseej; Riyadh; On-site; SAR 150,000 - 230,000; Full time

Job summary

Naseej is seeking an external expert to execute the cybersecurity and IT audit as part of the internal audit plan. The role involves fieldwork, testing controls, collecting evidence, and documenting results for the audit.

Responsibilities include verifying compliance with NCA controls, reviewing disaster recovery plans, and assessing backup and restoration procedures. A CISA or equivalent certification is required.

Qualifications

• At least 5 years of cybersecurity and IT auditing experience.
• Knowledge of NCA cyber frameworks including ECC.
• Experience reviewing disaster recovery plans and backups.

Responsibilities

• Test controls, collect evidence, and document results.
• Ensure compliance with NCA controls and disaster recovery requirements.

Skills

Cybersecurity

IT auditing

NCA ECC

Disaster recovery

Education

CISA certification or equivalent

Job description

Company Description:

Naseej is a leading technology company committed to harnessing the power of digital transformation in learning & knowledge management by enabling our customers to provide rich experiences for their users and adapt to a dynamic technology landscape while reducing their technical burden enabling them to focus on achieving their strategic objectives. And for almost 36 years, Naseej with its branches all over the MENA region had made many contributions to be one of the market leaders in the fields of E-Learning, Edu-Tech & Digital transformation. Naseej website: https://www.naseej.com/

Job Summary:

We're looking for an external expert to carry out the execution (fieldwork) of the cybersecurity and IT audit included in the approved internal audit plan. Internal Audit will set the scope, supervise and review the work, and issue the report.

Key Responsibilities:

• 
  

  The expert will test the controls, collect evidence, and document the results for:

  
  
  
  
  1. 
     

     Compliance with the National Cybersecurity Authority (NCA) controls applicable to the company.

     
     
  
  
  2. 
     

     IT disaster recovery: the recovery plan, backup and restoration, and plan testing..

     
     
  
  
  
  

Requirements:

• 
  

  At least [5] years of experience in cybersecurity and IT auditing.

  
  


• 
  

  Knowledge of NCA cybersecurity frameworks, including the Essential Cybersecurity Controls (ECC).

  
  


• 
  

  Experience reviewing disaster recovery plans.

  
  


• 
  

  A recognized professional certification such as CISA, or equivalent..