IT / IS Auditor Jobs in Saudi Arabia – IT Audit & Cybersecurity

ServicesAlly; Saudi Arabia; On-site; SAR 150,000 - 280,000; Full time

Job summary

Client Confidential in Saudi Arabia seeks an experienced IT/IS Auditor to assess IT governance, information security controls, and regulatory compliance. You will strengthen the control environment, identify technology risks, and provide practical recommendations aligned with audit frameworks and Saudi regulations.

The ideal candidate should communicate technical findings as business risks and possess strong analytical and reporting skills to support stakeholders and drive risk-informed

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related discipline.
• Relevant professional experience in IT auditing, information systems auditing, or technology risk assessment.
• Sound understanding of IT governance and risk management.
• Knowledge of cybersecurity controls and regulatory compliance.
• Strong analytical, documentation, reporting, and communication skills.

Responsibilities

• Assess IT governance frameworks and internal controls.
• Evaluate information security controls and cybersecurity risks.
• Support technology risk assessments and IT auditing activities.
• Review regulatory compliance against applicable Saudi requirements.
• Identify technology-related risks and control weaknesses.
• Provide practical recommendations to strengthen internal controls.
• Translate technical findings into clear business risk implications.
• Prepare audit documentation and reports.
• Communicate findings and recommendations to relevant stakeholders.

Skills

IT auditing

Information systems auditing

Technology risk assessment

IT governance

Communication

Education

Bachelor's degree

CISA

CRISC

Tools

COBIT

ITGC

SAMA CSF

NCA ECC

Job description

Location: Saudi Arabia
Company: Client Confidential
Job Category: Information Technology (IT) & Software
Function: IT Audit / Information Security / Governance, Risk & Compliance (GRC)
Experience Required: Relevant professional experience in IT auditing, information systems auditing, or technology risk assessment
Employment Type: Not specified

Job Overview

A recruitment opportunity is available for an experienced Information Technology and Information Systems Auditor (IT / IS Auditor) in Saudi Arabia.

The selected candidate will support the assessment of IT governance, information security controls, cybersecurity risks, and regulatory compliance. The role focuses on strengthening the organization’s internal control environment, identifying technology-related risks, and providing practical recommendations aligned with recognized audit frameworks and applicable Saudi regulatory requirements.

The ideal candidate should have a strong understanding of IT governance, risk management, cybersecurity controls, and regulatory compliance, along with the ability to communicate technical findings in terms of business risks.

Key Responsibilities

• Assess IT governance frameworks and internal controls.
• Evaluate information security controls and cybersecurity risks.
• Support technology risk assessments and IT auditing activities.
• Review regulatory compliance against applicable Saudi requirements.
• Identify technology-related risks and control weaknesses.
• Provide practical recommendations to strengthen internal controls.
• Evaluate controls against recognized audit frameworks.
• Translate technical audit findings into clear business risk implications.
• Prepare audit documentation and reports.
• Communicate findings and recommendations to relevant stakeholders.

Requirements & Qualifications

Education and Professional Experience

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related discipline.
• Relevant professional experience in IT auditing, information systems auditing, or technology risk assessment.
• Sound understanding of IT governance and risk management.
• Knowledge of cybersecurity controls and regulatory compliance.
• Strong analytical, documentation, reporting, and communication skills.

Preferred Professional Certifications

• Certified Information Systems Auditor (CISA).
• Certified in Risk and Information Systems Control (CRISC).
• ISO/IEC 27001-related certification.

Additional Preferred Competencies

• Familiarity with COBIT, ITGC, and risk-based auditing methodologies.
• Experience evaluating controls against NCA ECC and SAMA CSF requirements.
• Ability to translate technical findings into clear business risk implications.
• Strong attention to detail and professional judgment.
• Stakeholder engagement skills.

Salary, Benefits & Career Growth

Compensation details have not been provided in the vacancy. Candidates should confirm the monthly salary package and other employment benefits with the hiring contact.