Lead Auditor

تابي; Riyadh; On-site; SAR 200,000 - 420,000; Full time

Benefits offered by this job

Health insurance

Job summary

Tabby is seeking an Audit Lead – IT & Cyber Security to guide end-to-end IT and cyber security audits, supervise engagement teams, and deliver high-quality results aligned with the technology risk-based audit plan. You will coordinate with process owners, develop audit programs and RCMs, review fieldwork, and report findings to engineering and information security stakeholders, ensuring timely remediation.

The role requires strong communication, knowledge of IT controls, cloud security, and a

Qualifications

• 5+ years of IT audit, information security or technology risk experience, with leading engagements.
• Experience in banking/fintech or corporate environments preferred.
• Strong understanding of IT controls and cybersecurity frameworks.

Responsibilities

• Lead planning and execution of IT general controls, application controls, and cybersecurity audits.
• Develop audit programs and risk matrices covering IT and cyber risk areas.
• Supervise fieldwork of auditors and interns, ensuring quality and methodology adherence.
• Conduct walkthroughs and testing of IT controls, IAM, and cloud configurations.
• Draft audit findings with actionable remediation recommendations.
• Present results to process owners and stakeholders in Engineering and Information Security.
• Coordinate remediation timelines and track implementation progress.
• Contribute to annual tech risk assessments for assigned systems.

Skills

IT audit

information security

technology risk

IT general controls

communication

cloud security

audit tools

SAMA requirements

Education

Bachelor's degree in Computer Science or related

CISA (in progress/desirable)

Tools

IT audit tools

Cloud platforms AWS/Azure/GCP

Job description

Lead Auditor

Department: Internal Audit

Employment Type: Full Time

Location: KSA

Reporting To: Hatem AlHaidan

Description

As Audit Lead – IT & Cyber Security Audit, you will lead the end-to-end execution
of IT, cybersecurity, and technology audit engagements, supervising
engagement teams and delivering high-quality audit results in line with Tabby's
technology risk-based audit plan.

Key Responsibilities

• Lead the planning and execution of assigned IT general controls,
• application controls, and cybersecurity audit engagements, from
  scoping through reporting.
• Develop detailed audit programs and risk and control matrices (RCMs)
  covering IT and cyber risk areas, aligned with the approved audit plan.
• Supervise and review the fieldwork of Senior Auditors, Auditors, and
  Interns assigned to the engagement, ensuring quality and adherence to
  methodology.
• Conduct walkthroughs, technical interviews, and testing of IT general
  controls, application controls, network and endpoint security, identity
  and access management, and cloud configurations.
• Identify control gaps and root causes, and draft clear, actionable audit
  findings and recommendations on technology and cyber risk.
• Draft audit reports and present engagement results to Engineering and
  Information Security process owners.
• Engage directly with technology process owners to validate findings,
  agree on corrective action plans, and set remediation timelines.
• Track and follow up on the implementation of IT and cyber audit
  recommendations for assigned engagements.
• Contribute to the annual technology and cyber risk assessment for
  assigned systems and platforms.
• Coach and provide on-the-job guidance to Senior Auditors, Auditors,
  and Interns on IT audit techniques.
• Support the Audit Manager in preparing quarterly and annual IT/cyber
  audit reporting materials.
• Stay current on IT auditing standards, cybersecurity frameworks, and
  SAMA regulatory requirements (including the SAMA Cyber Security

Skills, Knowledge and Expertise

• 5+ years of experience in IT audit, information security, or technology risk,
  including experience leading audit engagements, preferably within
  banking, fintech, or corporate environments.
• Strong knowledge of IT auditing standards, cybersecurity frameworks,
  and SAMA regulatory requirements.
• Experience assessing IT general controls, application controls, and
  cybersecurity controls.
• Strong communication and interpersonal skills to engage with
  technology process owners and present audit findings.
• Strong analytical and problem-solving skills with a detail-oriented
  approach.
• Proficiency in IT audit tools and familiarity with cloud platforms
  (AWS/Azure/GCP).
• Bachelor's degree in Computer Science, Information Systems,
  Cybersecurity, or a related field; CISA (obtained or in progress) highly
  desirable.