Lead Auditor KSA

تابي; Saudi Arabia; On-site; SAR 180,000 - 280,000; Full time

Job summary

Tabby, a leading financial technology company in Saudi Arabia, seeks an Audit Lead – IT & Cyber Security to drive end-to-end IT audits and cyber risk assessments. You will supervise engagement teams and ensure high-quality findings aligned with the technology risk-based audit plan.

You will plan and execute IT general and application controls and cyber security audits, review fieldwork, and present actionable recommendations to owners.

Qualifications

• 5+ years in IT audit or technology risk.
• Experience leading audit engagements.
• SAMA regulatory requirements knowledge.
• Strong knowledge of IT auditing standards and cybersecurity frameworks.
• Bachelor's degree in CS/IS/Cybersecurity; CISA desirable.

Responsibilities

• Lead planning and execution of IT general controls and cybersecurity audits.
• Develop audit programs and risk/control matrices (RCMs).
• Supervise Senior Auditors, Auditors, and Interns on engagements.
• Conduct walkthroughs, interviews, and testing of controls.
• Draft audit findings and recommendations and present to process owners.
• Stay current on IT auditing standards and SAMA requirements.

Skills

IT audit

Information security

Technology risk

Audit leadership

Banking fintech

Communication

Analytical

Cloud platforms

Education

Bachelor's degree in Computer Science

Information Systems

Cybersecurity

Tools

IT audit tools

Job description

Lead Auditor

Department: Internal Audit

Employment Type: Full Time

Location: KSA

Reporting To: Hatem AlHaidan

Description

As Audit Lead – IT & Cyber Security Audit, you will lead the end-to-end execution
of IT, cybersecurity, and technology audit engagements, supervising
engagement teams and delivering high-quality audit results in line with Tabby's
technology risk-based audit plan.

Key Responsibilities

• Lead the planning and execution of assigned IT general controls,
• application controls, and cybersecurity audit engagements, from
  scoping through reporting.
• Develop detailed audit programs and risk and control matrices (RCMs)
  covering IT and cyber risk areas, aligned with the approved audit plan.
• Supervise and review the fieldwork of Senior Auditors, Auditors, and
  Interns assigned to the engagement, ensuring quality and adherence to
  methodology.
• Conduct walkthroughs, technical interviews, and testing of IT general
  controls, application controls, network and endpoint security, identity
  and access management, and cloud configurations.
• Identify control gaps and root causes, and draft clear, actionable audit
  findings and recommendations on technology and cyber risk.
• Draft audit reports and present engagement results to Engineering and
  Information Security process owners.
• Engage directly with technology process owners to validate findings,
  agree on corrective action plans, and set remediation timelines.
• Track and follow up on the implementation of IT and cyber audit
  recommendations for assigned engagements.
• Contribute to the annual technology and cyber risk assessment for
  assigned systems and platforms.
• Coach and provide on-the-job guidance to Senior Auditors, Auditors,
  and Interns on IT audit techniques.
• Support the Audit Manager in preparing quarterly and annual IT/cyber
  audit reporting materials.
• Stay current on IT auditing standards, cybersecurity frameworks, and
  SAMA regulatory requirements (including the SAMA Cyber Security

Skills, Knowledge and Expertise

• 5+ years of experience in IT audit, information security, or technology risk,
  including experience leading audit engagements, preferably within
  banking, fintech, or corporate environments.
• Strong knowledge of IT auditing standards, cybersecurity frameworks,
  and SAMA regulatory requirements.
• Experience assessing IT general controls, application controls, and
  cybersecurity controls.
• Strong communication and interpersonal skills to engage with
  technology process owners and present audit findings.
• Strong analytical and problem-solving skills with a detail-oriented
  approach.
• Proficiency in IT audit tools and familiarity with cloud platforms
  (AWS/Azure/GCP).
• Bachelor's degree in Computer Science, Information Systems,
  Cybersecurity, or a related field; CISA (obtained or in progress) highly
  desirable.