Lead Auditor

tabby; Medina; On-site; SAR 180,000 - 320,000; Full time

Job summary

Tabby is seeking an Audit Lead IT & Cyber Security Audit to drive end-to-end IT and cybersecurity audits, supervising engagement teams and delivering high-quality results aligned with the risk-based audit plan. You will plan and execute IT general controls and application controls, develop risk and control matrices, and present findings to technology process owners.

Ideal candidates have 5+ years in IT audit or information security, knowledge of standards and SAMA regulations, and experience

Qualifications

• 5+ years of experience in IT audit, information security, or technology risk, including experience leading audit engagements, preferably within banking, fintech, or corporate environments.
• Strong knowledge of IT auditing standards, cybersecurity frameworks, and SAMA regulatory requirements.
• Experience assessing IT general controls, application controls, and cybersecurity controls.
• Strong communication and interpersonal skills to engage with technology process owners and present audit findings.
• Strong analytical and problem-solving skills with a detail-oriented approach.
• Proficiency in IT audit tools and familiarity with cloud platforms (AWS/Azure/GCP).
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• CISA (obtained or in progress) highly desirable.

Responsibilities

• Lead the planning and execution of IT general controls, application controls, and cybersecurity audit engagements from scoping through reporting.
• Develop detailed audit programs and risk and control matrices covering IT and cyber risk areas aligned with the approved audit plan.
• Supervise and review fieldwork of Senior Auditors, Auditors, and Interns to ensure quality and adherence to methodology.
• Conduct walkthroughs, technical interviews, and testing of IT general controls, application controls, network and endpoint security, IAM, and cloud configurations.
• Identify control gaps and root causes and draft actionable audit findings and recommendations on technology and cyber risk.
• Draft audit reports and present engagement results to Engineering and Information Security process owners.
• Engage with technology process owners to validate findings and set remediation timelines.
• Track and follow up on the implementation of IT and cyber audit recommendations.

Skills

IT Audit

InfoSec

Cybersecurity

Audit Leadership

SAMA Regulations

Education

BSc CS/IS/Cybersecurity

Tools

Audit Tools

Job description

Audit Lead IT amp Cyber Security Audit

As Audit Lead IT amp Cyber Security Audit you will lead the end-to-end execution of IT cybersecurity and technology audit engagements supervising engagement teams and delivering high-quality audit results in line with Tabby s technology risk-based audit plan.

Responsibilities

• Lead the planning and execution of assigned IT general controls application controls and cybersecurity audit engagements from scoping through reporting.
• Develop detailed audit programs and risk and control matrices RCMs covering IT and cyber risk areas aligned with the approved audit plan.
• Supervise and review the fieldwork of Senior Auditors Auditors and Interns assigned to the engagement ensuring quality and adherence to methodology.
• Conduct walkthroughs technical interviews and testing of IT general controls application controls network and endpoint security identity and access management and cloud configurations.
• Identify control gaps and root causes and draft clear actionable audit findings and recommendations on technology and cyber risk.
• Draft audit reports and present engagement results to Engineering and Information Security process owners.
• Engage directly with technology process owners to validate findings agree on corrective action plans and set remediation timelines.
• Track and follow up on the implementation of IT and cyber audit recommendations for assigned engagements.
• Contribute to the annual technology and cyber risk assessment for assigned systems and platforms.
• Coach and provide on-the-job guidance to Senior Auditors Auditors and Interns on IT audit techniques.
• Support the Audit Manager in preparing quarterly and annual IT cyber audit reporting materials.
• Stay current on IT auditing standards cybersecurity frameworks and SAMA regulatory requirements.

Qualifications

• 5+ years of experience in IT audit, information security, or technology risk, including experience leading audit engagements, preferably within banking, fintech, or corporate environments.
• Strong knowledge of IT auditing standards, cybersecurity frameworks, and SAMA regulatory requirements.
• Experience assessing IT general controls, application controls, and cybersecurity controls.
• Strong communication and interpersonal skills to engage with technology process owners and present audit findings.
• Strong analytical and problem-solving skills with a detail-oriented approach.
• Proficiency in IT audit tools and familiarity with cloud platforms (AWS/Azure/GCP).
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• CISA (obtained or in progress) highly desirable.