IT/IS Auditor: Governance, Cyber Risk & Compliance

ServicesAlly; Saudi Arabia; On-site; SAR 150,000 - 280,000; Full time

Job summary

Client Confidential in Saudi Arabia seeks an experienced IT/IS Auditor to assess IT governance, information security controls, and regulatory compliance. You will strengthen the control environment, identify technology risks, and provide practical recommendations aligned with audit frameworks and Saudi regulations.

The ideal candidate should communicate technical findings as business risks and possess strong analytical and reporting skills to support stakeholders and drive risk-informed

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related discipline.
• Relevant professional experience in IT auditing, information systems auditing, or technology risk assessment.
• Sound understanding of IT governance and risk management.
• Knowledge of cybersecurity controls and regulatory compliance.
• Strong analytical, documentation, reporting, and communication skills.

Responsibilities

• Assess IT governance frameworks and internal controls.
• Evaluate information security controls and cybersecurity risks.
• Support technology risk assessments and IT auditing activities.
• Review regulatory compliance against applicable Saudi requirements.
• Identify technology-related risks and control weaknesses.
• Provide practical recommendations to strengthen internal controls.
• Translate technical findings into clear business risk implications.
• Prepare audit documentation and reports.
• Communicate findings and recommendations to relevant stakeholders.

Skills

IT auditing

Information systems auditing

Technology risk assessment

IT governance

Communication

Education

Bachelor's degree

CISA

CRISC

Tools

COBIT

ITGC

SAMA CSF

NCA ECC

Job description

Client Confidential in Saudi Arabia seeks an experienced IT/IS Auditor to assess IT governance, information security controls, and regulatory compliance. You will strengthen the control environment, identify technology risks, and provide practical recommendations aligned with audit frameworks and Saudi regulations.

The ideal candidate should communicate technical findings as business risks and possess strong analytical and reporting skills to support stakeholders and drive risk-informed